CrowdStrike’s work with the Democratic National Committee: Setting the record straight
Tags
country: Brazil Malaysia Canada China Netherlands Germany France Georgia Iran Japan South Korea Mexico New Zealand Russia Ukraine United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Hardware - T1592.001 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Python - T1059.006 Rundll32 - T1218.011 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Powershell - T1086 Remote Access Tools - T1219 Rundll32 - T1085 Windows Management Instrumentation - T1047
Show in Graph
Common Information
Type Value
UUID 74ad469b-bf59-4cb0-94e6-3a61fee19cee
Fingerprint 9419981d02939681
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 7, 2024, midnight
Added to db Nov. 12, 2024, 11:47 a.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline CrowdStrike’s work with the Democratic National Committee: Setting the record straight
Title CrowdStrike’s work with the Democratic National Committee: Setting the record straight
Detected Hints/Tags/Attributes 163/3/19
Source URLs
Redirection Url
Details Source https://www.crowdstrike.com/en-us/blog/bears-midst-intrusion-democratic-national-committee/
URL Provider
Details Provider Source level domain
Details crowdstrike.com www.crowdstrike.com
Attributes
Details Type #Events CTI Value
Details Domain 17 
www.nbcnews.com
Details Domain 16 
sec.gov
Details Domain 228 
system.io
Details Domain 149 
system.security
Details File 2 
pagemgr.exe
Details File 5 
twain_64.dll
Details File 4 
vmupgradehelper.exe
Details File 1208 
powershell.exe
Details File 2 
prov.key
Details File 1018 
rundll32.exe
Details File 1 
c:\windows\twain_64.dll
Details sha256 2 
6c1bce76f4d2358656132b6b1d471571820688ccdbaca0d86d0ca082b9390536
Details sha256 2 
b101cd29e18a515753409ae86ce68a4cedbe0d640d385eb24b9bbb69cf8186ae
Details sha256 2 
fd39d2837b30e7233bc54598ff51bdc2f8c418fa5b94dea2cadb24cf40f395e5
Details sha256 2 
4845761c9bed0563d0aa83613311191e075a9b58861e80392914d61a21bad976
Details sha256 2 
40ae43b7d6c413becc92b07076fa128b875c8dbb4da7c036639eccf5a9fc784f
Details Threat Actor Identifier - APT 665 
APT29
Details Threat Actor Identifier - APT 783 
APT28
Details Url 1 
https://www.nbcnews.com/meet-the-press/meet-press-december-29-2019-n1106036