WarmCookie Trojan IOCs - II - SEC-1275-1
Tags
| attack-pattern: | Data |
Common Information
| Type | Value |
|---|---|
| UUID | 8b9813b6-e72e-4ccf-9b8e-b0a546d47cb7 |
| Fingerprint | 6addfb19ff74c4bf |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Aug. 27, 2024, midnight |
| Added to db | Aug. 30, 2024, 11:15 p.m. |
| Last updated | Nov. 13, 2024, 6:35 a.m. |
| Headline | WarmCookie Trojan IOCs - II |
| Title | WarmCookie Trojan IOCs - II - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 4/1/11 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://1275.ru/ioc/3883/warmcookie-trojan-iocs-ii/?mtm_campaign=rss |
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | md5 | 3 | e93629b052f25d25c92a4afaee51cc81 |
|
| Details | sha256 | 2 | 2b504adfdf6c68889eae2207454ce4b647f31107c294106db597d3d29ad03ac3 |
|
| Details | sha256 | 5 | 87f57a7a4b4c83ecb3cdd5f274c95cd452c703de604f68aff6e59964b662e3f8 |
|
| Details | sha256 | 2 | 91ab50b8c120a34eaed447e6b72355b97907fc51361174977c9fd13e590a8aa3 |
|
| Details | sha256 | 5 | c6c777beb38120497e6b26fea8f376652eafb5b661c65a87265421dc83f61121 |
|
| Details | sha256 | 5 | f4d2c9470b322af29b9188a3a590cbe85bacb9cc8fcd7c2e94d82271ded3f659 |
|
| Details | IPv4 | 4 | 72.5.43.29 |
|
| Details | Url | 2 | http://72.5.43.29 |
|
| Details | Url | 2 | http://72.5.43.29/data/e93629b052f25d25c92a4afaee51cc81 |
|
| Details | Url | 2 | https://chrome.checkfedexexp.com/data-privacy?roy=itdxzq&utc=owvkukxdz&sourceln=uyjcs&pkcontent=yjzjvgndl&qv_cid=6358959&yn=8813337 |
|
| Details | Url | 2 | https://portals.checkfedexexp.com/documents?28f3c0c77f76899be4c6&medium=auwrx&fxvk=326828c5ba7db1a8 |