Andromeda Malware IOCs - SEC-1275-1
Tags
| attack-pattern: | Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Rundll32 - T1218.011 Rundll32 - T1085 |
Common Information
| Type | Value |
|---|---|
| UUID | 93a9a308-209d-46a8-bd16-d9334f60da77 |
| Fingerprint | c69853279e33bc7b |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Dec. 6, 2024, midnight |
| Added to db | Dec. 6, 2024, 6:12 a.m. |
| Last updated | Dec. 18, 2024, 2:15 p.m. |
| Headline | Andromeda Malware IOCs |
| Title | Andromeda Malware IOCs - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 10/1/23 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://1275.ru/ioc/8354/andromeda-malware-iocs/?mtm_campaign=rss |
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 7 | malware.com |
|
| Details | Domain | 4 | deltaheavy.ru |
|
| Details | File | 1053 | rundll32.exe |
|
| Details | File | 16 | trustedinstaller.exe |
|
| Details | File | 1152 | svchost.exe |
|
| Details | sha1 | 3 | 2620d60d8283936d6671713477cdd9ae2e28eb1b |
|
| Details | sha1 | 3 | 274c2facba9d04e1f3cbf31528af0ac162da5db7 |
|
| Details | sha1 | 3 | 3a96e920f70f252cba1f5e43ea386aec0d1fb704 |
|
| Details | sha1 | 3 | 4dec324ebeef3a9aef57cc71c6b1b5e530412a4e |
|
| Details | sha1 | 3 | 4fc5f6704008898447313ccde4f8ede7de91078d |
|
| Details | sha1 | 3 | 6dc84c457ea8f5ff29fbd1c6c968e3ffa53f7870 |
|
| Details | sha1 | 3 | 72bc039f1d37b610ba6c4b577dbe82feba37e813 |
|
| Details | sha1 | 3 | 76e3fd90eae759db964fc5af6d1a31e74bd6d9b4 |
|
| Details | sha1 | 3 | 8d3f65f067fe1fc090174dcac53eb9c0fb46edc6 |
|
| Details | sha1 | 3 | 951206a961f3c679c8e32dbbcec66ed75ca9f117 |
|
| Details | sha1 | 3 | b0fb70192b26c18858893f09e9d75d2e52f3f475 |
|
| Details | sha1 | 3 | c20c26d9f4f9bff3cf4c29b5c1c30252d938eddb |
|
| Details | sha1 | 3 | c2122c796f1afdf94f3aeaa539fdd2d30807c555 |
|
| Details | sha1 | 3 | cae4e8c730de5a01d30aabeb3e5cb2136090ed8d |
|
| Details | sha1 | 3 | d36e846202330271d43c425fb4674e71720dfd47 |
|
| Details | sha1 | 3 | e4fcf9c1ee2dcc115f5fc8f074fa56ffd484aac9 |
|
| Details | sha1 | 3 | ef275035b54da5edff5b7f802135f2ff0c687fff |
|
| Details | sha1 | 3 | f521451fd6083aa2a91c32091da1908eb8c86866 |