Threat Thursday: BHunt Scavenger Harvests Victims’ Crypto Wallets
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Credentials - T1589.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Social Media Accounts - T1585.001 Social Media Accounts - T1586.001 Software - T1592.002 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID 9e777c0a-cad5-4888-af49-dac0d318b639
Fingerprint b36492f1243bc3ae
Analysis status DONE
Considered CTI value 2
Text language
Published Feb. 10, 2022, 1:01 a.m.
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Nov. 17, 2024, 6:53 p.m.
Headline Threat Thursday: BHunt Scavenger Harvests Victims’ Crypto Wallets
Title Threat Thursday: BHunt Scavenger Harvests Victims’ Crypto Wallets
Detected Hints/Tags/Attributes 62/2/32
Source URLs
Redirection Url
Details Source https://blogs.blackberry.com/en/2022/02/threat-thursday-bhunt-scavenger
URL Provider
Details Provider Source level domain
Details blackberry.com blogs.blackberry.com
Attributes
Details Type #Events CTI Value
Details Domain 33 
www.apache.org
Details Domain 1 
minecraftsquid.hopto.org
Details Domain 358 
pastebin.com
Details Domain 37 
www.blackberry.com
Details File 4 
msn.exe
Details File 2 
msh.exe
Details File 2 
mscrlib.exe
Details File 96 
wallet.dat
Details File 3 
%appdata%\exodus\exodus.wallet
Details File 1 
%appdata%\bonanza.exe
Details File 2 
bonanza.exe
Details File 13 
office.exe
Details File 2 
outllook.exe
Details File 1 
%appdata%\scype\svx.exe
Details File 1 
%appdata%\scype\a\svc.exe
Details File 1 
%appdata%\scype\a\svx.exe
Details File 1 
ifo.php
Details File 8 
pe.dat
Details sha256 1 
cfe45218711e6c3b01ac81548f0c96d43cff41dbfe0fdc29e2ccdcba61dc1c84
Details sha256 1 
b32c9c13ae27898f77bd6c3484fde6539ddc142798eb697ef5cbbcbb63a121b3
Details sha256 1 
b1f1d05c13e416402ae7e32ade9d49f2f058e04cfbf6880ba7719b4383e4aac5
Details sha256 1 
be43e2437578e7be2e2d08e389b9c02394bd66782dc6508302696c68e1bc6ae0
Details sha256 1 
5c275655655cc2a1acc91d8fec801e4d20efb717484ff7897ee49bf155ec2141
Details sha256 1 
23751b815efc2330051cc516baef1e1aa36c5e9eb8f515229535ac962b7dd0c9
Details sha256 1 
c8bd186c08bdb019cc1f6cf01cb94910082ae02a2a3ad065e90340723e9320fe
Details sha256 1 
592f207c7a28af0c70217b497356c10fe35a8677f68da60650fdceee4d8310be
Details sha256 1 
70cc9d323eb0abe1263b51d44deedd6d72ee87863176ed1c67746f35aeb41535
Details Url 20 
https://www.apache.org/licenses/license-2.0
Details Url 2 
http://minecraftsquid.hopto.org/ifo.php
Details Url 1 
https://pastebin.com/raw/egrczwca
Details Url 1 
https://pastebin.com/raw/hmaz9edn
Details Url 17 
https://www.blackberry.com/us/en/forms/cylance/handraiser/emergency-incident-response-containment