Phishing Analysis - CYFIRMA
Tags
cmtmf-attack-pattern: Command And Scripting Interpreter Obfuscated Files Or Information
maec-delivery-vectors: Watering Hole
attack-pattern: Data Command And Scripting Interpreter - T1623 Credential Api Hooking - T1056.004 Data From Local System - T1533 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Obfuscated Files Or Information - T1406 Process Discovery - T1424 Phishing - T1660 Phishing - T1566 Registry Run Keys / Startup Folder - T1547.001 Rundll32 - T1218.011 Scheduled Task - T1053.005 Visual Basic - T1059.005 Virtualization/Sandbox Evasion - T1497 Time Based Evasion - T1497.003 Virtualization/Sandbox Evasion - T1633 Command-Line Interface - T1059 Data From Local System - T1005 Obfuscated Files Or Information - T1027 Process Discovery - T1057 Query Registry - T1012 Registry Run Keys / Start Folder - T1060 Rundll32 - T1085 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID 79129813-dd6e-4545-8051-239ff68d3e06
Fingerprint 88bd5fd12ed63683
Analysis status DONE
Considered CTI value 2
Text language
Published June 7, 2023, 6:26 a.m.
Added to db Dec. 18, 2024, 9:42 p.m.
Last updated Dec. 23, 2024, 2:08 p.m.
Headline Phishing Analysis
Title Phishing Analysis - CYFIRMA
Detected Hints/Tags/Attributes 53/3/18
Source URLs
Redirection Url
Details Source https://www.cyfirma.com/research/phishing-analysis/
Details Redirection https://www.cyfirma.com/outofband/phishing-analysis/
URL Provider
Details Provider Source level domain
Details cyfirma.com www.cyfirma.com
Attributes
Details Type #Events CTI Value
Details Domain 56 
storage.googleapis.com
Details Domain 1 
urh21265vg2o9x.appspot.com
Details Domain 1 
2brightlights.com
Details File 12 
%windir%\system32\rundll32.exe
Details File 2 
tamirlan.dll
Details md5 1 
9f0c4ed7308226d143e214ad43a29711
Details md5 1 
a0fca5d81252df8623f431b461b0da30
Details md5 1 
bb2f698d6b1aebba2c1d16ef665d3463
Details MITRE ATT&CK Techniques 468 
T1566
Details MITRE ATT&CK Techniques 109 
T1059.007
Details MITRE ATT&CK Techniques 425 
T1547.001
Details MITRE ATT&CK Techniques 680 
T1027
Details MITRE ATT&CK Techniques 65 
T1497.003
Details MITRE ATT&CK Techniques 520 
T1012
Details MITRE ATT&CK Techniques 472 
T1057
Details MITRE ATT&CK Techniques 11 
T1056.004
Details MITRE ATT&CK Techniques 561 
T1005
Details Url 1 
https://storage.googleapis.com/urh21265vg2o9x.appspot.com/g/b/file/d/fz