Spam in Europe Uses Hover Action, Spreads Trojan
Tags
country: Netherlands France Sweden Poland
maec-delivery-vectors: Watering Hole
attack-pattern: Data Cloud Services - T1021.007 Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Malicious File - T1204.002 Malicious Link - T1204.001 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 75f1fcb0-a668-42a4-b1d3-a78bad64c5f3
Fingerprint 2e52085a2db72ec7
Analysis status DONE
Considered CTI value 2
Text language
Published June 9, 2017, midnight
Added to db Oct. 15, 2024, 5:10 p.m.
Last updated Oct. 15, 2024, 5:11 p.m.
Headline Spam in Europe Uses Hover Action, Spreads Trojan
Title Spam in Europe Uses Hover Action, Spreads Trojan
Detected Hints/Tags/Attributes 88/3/18
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_ca/research/17/f/mouseover-otlard-gootkit.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details Domain 3 
cccn.nl
Details Domain 1 
basisinkomen.nl
Details Domain 1 
netart.pl
Details Domain 1 
chnet.se
Details File 12 
slide1.xml
Details sha256 3 
796a386b43f12b99568f55166e339fcf43a4792d292bdd05dafa97ee32518921
Details sha256 3 
55821b2be825629d6674884d93006440d131f77bed216d36ea20e4930a280302
Details sha256 3 
55c69d2b82addd7a0cd3bebe910cd42b7343bd3faa7593356bcdca13dd73a0ef
Details sha256 1 
556d9cefd63d305cb03f0a37535b3951cdb6d9d191400e40dc1a85bc2f67f720
Details sha256 1 
ad48d4d432a76f92a52eb0869cbba754f9ea73df280a30c28eac88712bfbd479
Details IPv4 1 
77.55.8.61
Details IPv4 1 
85.128.212.154
Details IPv4 1 
91.211.2.112
Details Url 3 
http://cccn.nl/c.php
Details Url 3 
http://cccn.nl/2.2
Details Url 1 
http://basisinkomen.nl/a.php
Details Url 1 
http://netart.pl
Details Url 1 
http://chnet.se