Careto is back: what’s new after 10 years of silence?
Tags
country: Laos
attack-pattern: Data Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Software - T1592.002 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID 8a283730-09ea-4012-a144-a977ed45b373
Fingerprint 2da111d869b5a4a1
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 12, 2024, 10:05 a.m.
Added to db Dec. 12, 2024, 11:44 a.m.
Last updated Dec. 21, 2024, 4:49 a.m.
Headline Careto is back: what’s new after 10 years of silence?
Title Careto is back: what’s new after 10 years of silence?
Detected Hints/Tags/Attributes 46/2/15
Source URLs
Redirection Url
Details Source https://malware.news/t/careto-is-back-what-s-new-after-10-years-of-silence/89313
URL Provider
Details Provider Source level domain
Details malware.news malware.news
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 158 ✔ Malware Analysis, News and Indicators - Latest topics https://malware.news/latest.rss 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 3 
c:\mdaemon\worldclient\worldclient.ini
Details File 3 
tpm-hascertretr.xml
Details File 9 
hmpalert.sys
Details File 3 
c:\windows\system32\hmpalert.dll
Details File 224 
winlogon.exe
Details File 62 
dwm.exe
Details File 6 
hmpalert.dll
Details File 4 
2.db
Details File 2 
%temp%\values.reg
Details File 2 
configmgr.dll
Details File 2 
filefilter.dll
Details File 13 
storage.dll
Details File 2 
kodak.dll
Details File 2 
comm.dll
Details File 3 
df01ac74d8be15ee01.tmp