The sleeping lion: analysis of InstallsKey related service
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Software - T1592.002 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 97f24c96-307d-49f9-a1b0-f3f8187331b1
Fingerprint 33809311d7bd06fa
Analysis status DONE
Considered CTI value 2
Text language
Published April 13, 2025, 7:44 p.m.
Added to db April 13, 2025, 10:54 p.m.
Last updated April 16, 2025, 8:46 p.m.
Headline The sleeping lion: analysis of InstallsKey related service
Title The sleeping lion: analysis of InstallsKey related service
Detected Hints/Tags/Attributes 26/2/31
Source URLs
Redirection Url
Details Source https://grief222.medium.com/the-sleeping-lion-analysis-of-installskey-related-service-769c0ef7bc51?source=rss------malware-5
Details Source https://grief222.medium.com/the-sleeping-lion-analysis-of-installskey-related-service-769c0ef7bc51?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com grief222.medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Details 171 ✔ Malware on Medium https://medium.com/feed/tag/malware 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
fpn-stp.ru
Details Domain 1 
xiuty.com
Details Domain 2 
arakusus.com
Details Domain 2 
oyndr.com
Details Domain 1 
payperinst.com
Details Domain 1 
start7345724.ru
Details Domain 1 
20.ru
Details Domain 1 
ska4aservece.ru
Details Domain 1 
cononspace24.ru
Details Domain 8 
bitsight.com
Details Domain 118 
virustotal.com
Details File 120 
sqlite3.dll
Details md5 1 
b6f1fac98787e9069ae49deb884cabb8
Details sha256 1 
2e8e59eb04b473054402a130152a2e666f57cd07c6a7116edf4a4ea5ec20b271
Details sha256 1 
a4fef05ccd386520f7dc03ea1e03f060401ba2dadfe2b3db2046489bdb34f2b5
Details sha256 1 
a9f26b84f45f15e5fbe607ba1430282eafdd6d2c6546cfa0ea0149065307366f
Details sha256 1 
acc63db2e500e557b2c06294a21aabcce70dc599604d6c6a414f0d62977a37ad
Details sha256 1 
16574f51785b0e2fc29c2c61477eb47bb39f714829999511dc8952b43ab17660
Details Url 1 
https://www.virustotal.com/gui/file/2e8e59eb04b473054402a130152a2e666f57cd07c6a7116edf4a4ea5ec20b271
Details Url 2 
https://www.bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey
Details Url 1 
http://flstudio12–20.ru
Details Url 1 
https://fpn-stp.ru/file/1/14ec560
Details Url 1 
https://ska4aservece.ru/08704b219f879dd44c95349abb08811a0xirya9sqhru2llfgrzlc40ljcqnsdancv1l8su
Details Url 1 
https://cononspace24.ru/7238c4eb381399f071e20dc0ecf73844fmwhmv7ccey5x4z9krqhjftrd1gv/fn3f88wnty/fa
Details Url 1 
http://start7345724.ru/new/net_api
Details Url 1 
https://www.virustotal.com/gui/file/a4fef05ccd386520f7dc03ea1e03f060401ba2dadfe2b3db2046489bdb34f2b5
Details Url 1 
https://www.virustotal.com/gui/file/a9f26b84f45f15e5fbe607ba1430282eafdd6d2c6546cfa0ea0149065307366f
Details Url 1 
https://www.virustotal.com/gui/file/acc63db2e500e557b2c06294a21aabcce70dc599604d6c6a414f0d62977a37ad
Details Url 1 
https://www.virustotal.com/gui/file/16574f51785b0e2fc29c2c61477eb47bb39f714829999511dc8952b43ab17660/relations
Details Url 1 
https://jfrog.com/ja/blog/attacks-on-docker-with-millions-of-malicious-repositories-spread-malware-and-phishing-scams
Details Url 1 
https://www.zscaler.com/de/blogs/security-research/surge-fake-fifa-world-cup-streaming-sites-targets-virtual-fans