Неизвестная операция APT против России Белоруссии - SEC-1275-1
Tags
attack-pattern: | Domains - T1583.001 Domains - T1584.001 Powershell - T1059.001 Powershell - T1086 |
Common Information
Type | Value |
---|---|
UUID | 78461f26-dffe-447f-aa2f-f38189b79a76 |
Fingerprint | d88086fb588be553 |
Analysis status | DONE |
Considered CTI value | 0 |
Text language | |
Published | Oct. 30, 2023, midnight |
Added to db | Oct. 30, 2023, 7:26 a.m. |
Last updated | Nov. 17, 2024, 12:52 p.m. |
Headline | Неизвестная операция APT против России Белоруссии |
Title | Неизвестная операция APT против России Белоруссии - SEC-1275-1 |
Detected Hints/Tags/Attributes | 9/1/21 |
Source URLs
URL Provider
Details | Provider | Source level domain |
---|---|---|
Details | 1275.ru | 1275.ru |
RSS Feed
Details | Id | Enabled | Feed title | Url | Added to db |
---|---|---|---|---|---|
Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | CVE | 133 | cve-2023-38831 |
|
Details | Domain | 1 | cloudfare.webredirect.org |
|
Details | Domain | 246 | mail.ru |
|
Details | Domain | 119 | yandex.ru |
|
Details | 1 | minprom-cco@mail.ru |
||
Details | 1 | minpromsmekov@yandex.ru |
||
Details | File | 2 | resultati_sovehchaniya_11_09_2023.pdf |
|
Details | md5 | 1 | 0c363153f41eb38d08adccc0d5427f54 |
|
Details | md5 | 4 | 129ccb333ff92269a8f3f0e95a0338ba |
|
Details | md5 | 1 | 53ad0ee955ffeb5ccab171c4ad8e74ce |
|
Details | md5 | 1 | 596925f37edee6ce2d287dcde3360c73 |
|
Details | md5 | 1 | 9649f4babcd2b580ccfbc63e35020741 |
|
Details | md5 | 1 | a5051580a58fe56eeed03e714a8afba2 |
|
Details | md5 | 1 | a85b9c7212eee05bc3cde3eeba8c7951 |
|
Details | md5 | 1 | B047AD3BE0365472C5B76029E4569062 |
|
Details | md5 | 4 | b05960a5e1c1a239b785f0a42178e1df |
|
Details | md5 | 1 | cb4b08946b8eec16cbcf0f78f65a50f7 |
|
Details | md5 | 4 | cd1f48df9712b984c6eee3056866209a |
|
Details | IPv4 | 1 | 192.121.87.187 |
|
Details | IPv4 | 3 | 45.142.212.34 |
|
Details | IPv4 | 1 | 45.138.157.90 |