Hello! My name is Dtrack
Tags
country: India
maec-delivery-vectors: Watering Hole
attack-pattern: Data Ip Addresses - T1590.005 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Msiexec - T1218.007 Process Hollowing - T1055.012 Server - T1583.004 Server - T1584.004 Software - T1592.002 Verclsid - T1218.012 Tool - T1588.002 Process Hollowing - T1093
Show in Graph
Common Information
Type Value
UUID 9555bdfd-51bf-49a4-ab3e-bea4d8ba7d9c
Fingerprint a5495f99e5bd46f9
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 23, 2019, 10 a.m.
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Hello! My name is Dtrack
Title Hello! My name is Dtrack
Detected Hints/Tags/Attributes 48/3/24
Source URLs
Redirection Url
Details Source https://securelist.com/my-name-is-dtrack/93338/
URL Provider
Details Provider Source level domain
Details securelist.com securelist.com
Attributes
Details Type #Events CTI Value
Details File 2 
fontview.exe
Details File 6 
dwwin.exe
Details File 11 
wextract.exe
Details File 22 
runonce.exe
Details File 2 
grpconv.exe
Details File 269 
msiexec.exe
Details File 8 
rasautou.exe
Details File 3 
rasphone.exe
Details File 10 
extrac32.exe
Details File 18 
mobsync.exe
Details File 17 
verclsid.exe
Details File 63 
ctfmon.exe
Details File 9 
charmap.exe
Details File 21 
write.exe
Details File 33 
sethc.exe
Details File 55 
control.exe
Details File 14 
presentationhost.exe
Details File 3 
napstat.exe
Details File 6 
systray.exe
Details File 74 
mstsc.exe
Details File 12 
cleanmgr.exe
Details md5 1 
8f360227e7ee415ff509c2e443370e56
Details md5 1 
3a3bad366916aa3198fd1f76f3c29f24
Details md5 1 
F84de0a584ae7e02fb0ffe679f96db8d