Disruptive Attacks in Ukraine Likely Linked to Escalating Tensions
Tags
country: Poland Ukraine
attack-pattern: Data Code Repositories - T1213.003 Code Repositories - T1593.003 Defacement - T1491 Installutil - T1218.004 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Process Hollowing - T1055.012 Tool - T1588.002 Vulnerabilities - T1588.006 Installutil - T1118 Powershell - T1086 Process Hollowing - T1093 Denial Of Service
Show in Graph
Common Information
Type Value
UUID 790214dd-ea6b-49b5-9547-8e96f6c24013
Fingerprint e856bdd5497c0592
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 21, 2022, midnight
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Nov. 17, 2024, 10:40 p.m.
Headline Disruptive Attacks in Ukraine Likely Linked to Escalating Tensions
Title Disruptive Attacks in Ukraine Likely Linked to Escalating Tensions
Detected Hints/Tags/Attributes 78/2/22
Source URLs
Redirection Url
Details Source https://www.secureworks.com/blog/disruptive-attacks-in-ukraine-likely-linked-to-escalating-tensions
URL Provider
Details Provider Source level domain
Details secureworks.com www.secureworks.com
Attributes
Details Type #Events CTI Value
Details Domain 285 
microsoft.net
Details File 2 
tbopbh.exe
Details File 12 
tbopbh.jpg
Details File 9 
nmddfrqqrbyjeygggda.vbs
Details File 11 
advancedrun.exe
Details File 83 
installutil.exe
Details File 2126 
cmd.exe
Details File 113 
autoexec.bat
Details File 6 
frkmlkdkdubkznbkmcf.dll
Details md5 8 
5d5c99a08a7d927346ca2dafa7973fc1
Details md5 8 
14c8482f302b5e81e3fa1b18a509289d
Details md5 7 
b3370eb3c5ef6c536195b3bea0120929
Details md5 9 
e61518ae9454a563b8f842286bbdb87b
Details sha1 3 
189166d382c73c242ba45889d57980548d4ba37e
Details sha1 3 
16525cb2fd86dce842107eb1ba6174b23f188537
Details sha1 4 
b2d863fc444b99c479859ad7f012b840f896172e
Details sha1 3 
82d29b52e35e7938e7ee610c04ea9daaf5e08e90
Details sha256 20 
a196c6b8ffcb97ffb276d04f354696e2391311db3841ae16c8c9f56f36a38e92
Details sha256 21 
dcbbae5a1c61dbbbb7dcd6dc5dd1eb1169f5329958d38b58c3fd9384081c9b78
Details sha256 12 
923eb77b3c9e11d6c56052318c119c1a22d11ab71675e6b95d05eeb73d1accd6
Details sha256 12 
9ef7dbd3da51332a78eff19146d21c82957821e464e8133e9594a07d716d892d
Details IPv4 9 
111.111.111.111