Threat Spotlight: Valak Slithers Its Way Into Manufacturing and Transportation Networks
Tags
country: Germany Spain Ukraine United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Email Account - T1087.003 Email Accounts - T1585.002 Email Accounts - T1586.002 Malware - T1587.001 Malware - T1588.001 Network Security Appliances - T1590.006 Regsvr32 - T1218.010 Server - T1583.004 Server - T1584.004 Regsvr32 - T1117
Show in Graph
Common Information
Type Value
UUID 9f269a1a-a914-4517-aeb6-d5263780a2ae
Fingerprint e6d6089b087584c9
Analysis status DONE
Considered CTI value 0
Text language
Published July 1, 2020, 11:02 a.m.
Added to db Sept. 11, 2022, 12:31 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Vulnerability Information
Title Threat Spotlight: Valak Slithers Its Way Into Manufacturing and Transportation Networks
Detected Hints/Tags/Attributes 90/3/4
Source URLs
Redirection Url
Details Source https://blog.talosintelligence.com/2020/07/valak-emerges.html
URL Provider
Details Provider Source level domain
Details talosintelligence.com blog.talosintelligence.com
Attributes
Details Type #Events CTI Value
Details Domain 904 
snort.org
Details File 459 
regsvr32.exe
Details File 1 
_ewtfih4ngoi2pjul.php
Details Url 1 
http://digifish3.com/blog/wp-content/themes/busify/_ewtfih4ngoi2pjul.php?x=mdawmsbskyec02ql3vg8ae9tvfhu6uy34q