Are Internet Macros Dead or Alive? | FortiGuard labs
Tags
country: Bangladesh Sri Lanka Nepal India Pakistan Italy U.S. Virgin Islands
maec-delivery-vectors: Watering Hole
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Domains - T1583.001 Domains - T1584.001 Html Smuggling - T1027.006 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Regsvr32 - T1218.010 Rundll32 - T1218.011 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006 Powershell - T1086 Regsvr32 - T1117 Rundll32 - T1085 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID 95b997c7-f6c8-4d10-bd13-97583e685713
Fingerprint 3c80b91b2bbcc769
Analysis status DONE
Considered CTI value 1
Text language
Published April 12, 2023, 11:29 a.m.
Added to db April 12, 2023, 5:47 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Are Internet Macros Dead or Alive?
Title Are Internet Macros Dead or Alive? | FortiGuard labs
Detected Hints/Tags/Attributes 93/3/8
Source URLs
Redirection Url
Details Redirection https://feeds.fortinet.com/~/735176375/0/fortinet/blog/threat-research~Are-Internet-Macros-Dead-or-Alive
Details Source https://www.fortinet.com/blog/threat-research/are-internet-macros-dead-or-alive
URL Provider
Details Provider Source level domain
Details fortinet.com www.fortinet.com
Details fortinet.com feeds.fortinet.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 122 ✔ Fortinet Threat Research Blog https://feeds.fortinet.com/fortinet/blog/threat-research 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 4 
vba.shell
Details File 1 
122523.tmp
Details File 459 
regsvr32.exe
Details File 1208 
powershell.exe
Details File 1 
c:\users\public\pictures\walpaper.jpeg
Details File 380 
notepad.exe
Details Threat Actor Identifier - APT-C 102 
APT-C-35
Details Threat Actor Identifier by Red Alert 38 
SectorE02