Rewterz Threat Alert – Donot APT Group – Active IOCs - Rewterz
Tags
| country: | India Pakistan |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Data Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Vulnerabilities - T1588.006 |
Common Information
| Type | Value |
|---|---|
| UUID | 8c1974f5-4c19-4073-a1dd-15c7ecd661ea |
| Fingerprint | cd902df16ea74f0f |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Feb. 23, 2022, 12:11 p.m. |
| Added to db | Dec. 19, 2024, 7:20 a.m. |
| Last updated | Dec. 19, 2024, 6:11 p.m. |
| Headline | Rewterz Threat Alert – Donot APT Group – Active IOCs |
| Title | Rewterz Threat Alert – Donot APT Group – Active IOCs - Rewterz |
| Detected Hints/Tags/Attributes | 27/3/6 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 3 | cve-2022-21988 |
|
| Details | Domain | 5 | tobaccosafe.xyz |
|
| Details | md5 | 1 | 0faee3dfee432f821ceabeaa0f2d234c |
|
| Details | sha1 | 1 | 5e48dfe31fa25fd0fcf173cd42caa98c9a253394 |
|
| Details | sha256 | 1 | e010ca233178440ae92c7e3bd045fd1d5724ee865748322c3125cd7dc6f96871 |
|
| Details | Url | 1 | http://tobaccosafe.xyz/nxbfhyglxq1dhzyy/bt0cmbr6dvowhbyd.php |