APT trends report Q1 2022
Tags
cmtmf-attack-pattern: Masquerading
country: Afghanistan Bangladesh Belarus Cambodia Germany India Pakistan South Korea Kyrgyzstan Poland Singapore Russia Taiwan Ukraine
maec-delivery-vectors: Watering Hole
attack-pattern: Data Defacement - T1491 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Firmware - T1592.003 Ip Addresses - T1590.005 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Screensaver - T1546.002 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Web Shell - T1505.003 Windows Service - T1543.003 Web Services - T1583.006 Web Services - T1584.006 Tool - T1588.002 Masquerading - T1036 Powershell - T1086 Screensaver - T1180 Web Shell - T1100 Masquerading
Show in Graph
Common Information
Type Value
UUID 77fb1217-8fb6-4b9b-9b71-b6e219da94fc
Fingerprint b530879b88798781
Analysis status DONE
Considered CTI value 2
Text language
Published April 27, 2022, 10 a.m.
Added to db Jan. 30, 2023, 4:33 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline APT trends report Q1 2022
Title APT trends report Q1 2022
Detected Hints/Tags/Attributes 201/4/18
Source URLs
Redirection Url
Details Source https://securelist.com/apt-trends-report-q1-2022/106351/
URL Provider
Details Provider Source level domain
Details securelist.com securelist.com
Attributes
Details Type #Events CTI Value
Details CVE 375 
cve-2017-11882
Details Domain 338 
kaspersky.com
Details Email 147 
intelreports@kaspersky.com
Details File 1122 
svchost.exe
Details File 1 
mempeng.exe
Details File 5 
vfhost.exe
Details File 9 
vftrace.dll
Details File 10 
thumb.dat
Details File 8 
letter.docx
Details Mandiant Uncategorized Groups 65 
UNC1151
Details Mandiant Uncategorized Groups 1 
UNC1514
Details Threat Actor Identifier - APT-C 1 
APT-C-601
Details Threat Actor Identifier - APT-Q 1 
APT-Q-122
Details Threat Actor Identifier - APT 297 
APT27
Details Threat Actor Identifier - APT 194 
APT35
Details Threat Actor Identifier - APT 121 
APT36
Details Threat Actor Identifier - APT 278 
APT10
Details Threat Actor Identifier - APT 522 
APT41