North Korean Hackers Use New Backdoor And RAT For Attacks
Tags
country: North Korea
attack-pattern: Data Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Powershell - T1086 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID 80b5ff13-316f-4aae-a822-2d8bc196d5d3
Fingerprint 48a523b8822e4e3
Analysis status DONE
Considered CTI value 1
Text language
Published Oct. 15, 2024, 3 a.m.
Added to db Oct. 15, 2024, 11:46 a.m.
Last updated Nov. 8, 2024, 9:30 a.m.
Headline North Korean Hackers Use New Backdoor And RAT For Attacks
Title North Korean Hackers Use New Backdoor And RAT For Attacks
Detected Hints/Tags/Attributes 36/2/4
Source URLs
Redirection Url
Details Source https://securityboulevard.com/2024/10/north-korean-hackers-use-new-backdoor-and-rat-for-attacks/
URL Provider
Details Provider Source level domain
Details securityboulevard.com securityboulevard.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 226 ✔ Security Boulevard https://securityboulevard.com/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 65 
tuxcare.com
Details File 7 
dfsvc.exe
Details Threat Actor Identifier - APT 277 
APT37
Details Url 1 
https://tuxcare.com/blog/north-korean-hackers-use-new-backdoor-and-rat-for-attacks