C.A.S (Cyber Anarchy Squad) APT IOCs - SEC-1275-1
Tags
cmtmf-attack-pattern: Exploit Public-Facing Application
attack-pattern: Confluence - T1213.001 Exploit Public-Facing Application - T1377 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Exploit Public-Facing Application - T1190 Powershell - T1086 Exploit Public-Facing Application
Show in Graph
Common Information
Type Value
UUID 93951394-d33e-4a67-81c0-f018ad115971
Fingerprint 7f917c9353004de3
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 19, 2024, midnight
Added to db Dec. 21, 2024, 3:35 a.m.
Last updated Dec. 24, 2024, 2:02 a.m.
Headline C.A.S (Cyber Anarchy Squad) APT IOCs
Title C.A.S (Cyber Anarchy Squad) APT IOCs - SEC-1275-1
Detected Hints/Tags/Attributes 13/2/13
Source URLs
Redirection Url
Details Source https://1275.ru/ioc/8633/c-a-s-cyber-anarchy-squad-apt-iocs/?mtm_campaign=rss
URL Provider
Details Provider Source level domain
Details 1275.ru 1275.ru
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 8 ✔ Архивы IOC - SEC-1275-1 https://1275.ru/ioc/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 2336 
cmd.exe
Details File 129 
sqlservr.exe
Details File 288 
net.exe
Details md5 2 
1fcd4f83bf6414d79d5f29ad1e795b3d
Details md5 2 
23b873bb66dc09e91127e20825b6cbc7
Details md5 2 
48210ca2408dc76815ad1b7c01c1a21a
Details md5 2 
6cbc93b041165d59ea5ded0c5f377171
Details md5 2 
8c70377554b291d4a231cf113398c00d
Details md5 2 
bcec17275114c6a87d8b7110aecec5cc
Details md5 2 
fc3a8eabd07a221b478a4ddd77ddce43
Details IPv4 5 
185.117.75.3
Details IPv4 5 
194.36.188.94
Details Windows Registry Key 50 
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run