New ZenRAT Malware Targeting Windows Users via Fake Password Manager Software
Tags
country: Germany
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Hardware - T1592.001 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Seo Poisoning - T1608.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 System Checks - T1633.001 System Checks - T1497.001
Show in Graph
Common Information
Type Value
UUID 76e52654-7a12-446d-84d8-b8dd63a66ee1
Fingerprint 2834e81da53f255f
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 27, 2023, 2:08 p.m.
Added to db Oct. 23, 2023, 12:23 a.m.
Last updated Oct. 16, 2024, 3:05 a.m.
Headline New ZenRAT Malware Targeting Windows Users via Fake Password Manager Software
Title New ZenRAT Malware Targeting Windows Users via Fake Password Manager Software
Detected Hints/Tags/Attributes 39/3/6
Source URLs
Redirection Url
Details Source https://thehackernews.com/2023/09/new-zenrat-malware-targeting-windows.html
Details Redirection https://www.proofpoint.com/us/newsroom/news/new-zenrat-malware-targeting-windows-users-fake-password-manager-software
URL Provider
Details Provider Source level domain
Details proofpoint.com www.proofpoint.com
Details thehackernews.com thehackernews.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 353 ✔ Proofpoint News Feed https://www.proofpoint.com/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 5 
crazygameis.com
Details Domain 19 
opensource.com
Details Domain 5 
vault.bitwarden.com
Details File 4 
bitwarden-installer-version-2023-7-1.exe
Details File 4 
applicationruntimemonitor.exe
Details IPv4 3 
185.186.72.14