Rewterz Threat Alert – Agent Tesla Malware – IOCs - Rewterz
Tags
attack-pattern: | Data Malware - T1587.001 Malware - T1588.001 Software - T1592.002 |
Common Information
Type | Value |
---|---|
UUID | 78993f96-a79b-49f1-9a63-cfb60c42db84 |
Fingerprint | c326d5456e55c74f |
Analysis status | DONE |
Considered CTI value | 0 |
Text language | |
Published | July 17, 2020, 10:50 a.m. |
Added to db | Dec. 19, 2024, 2:29 a.m. |
Last updated | Dec. 19, 2024, 8:19 p.m. |
Headline | Rewterz Threat Alert – Agent Tesla Malware – IOCs |
Title | Rewterz Threat Alert – Agent Tesla Malware – IOCs - Rewterz |
Detected Hints/Tags/Attributes | 18/1/12 |
Source URLs
URL Provider
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | CVE | 3 | cve-2020-3370 |
|
Details | Domain | 10 | webcam.it |
|
Details | Domain | 2 | hsdowsggpla.com |
|
Details | Domain | 2 | anythingbilliest.com |
|
Details | Domain | 2 | sevea-fr.com |
|
Details | Domain | 1 | jdtrusttrading.org |
|
Details | Domain | 2 | biz9holdings.com |
|
Details | Url | 2 | http://hsdowsggpla.com/thurevent.exe |
|
Details | Url | 2 | http://anythingbilliest.com/bmink/q6u9sghlyjyonfz.exe |
|
Details | Url | 2 | http://sevea-fr.com/july13o.exe |
|
Details | Url | 1 | http://jdtrusttrading.org/465648383.exe |
|
Details | Url | 1 | http://biz9holdings.com/pi/tkcrypt.exe |