Rewterz Threat Alert – APT SideWinder Group – Active IOCs - Rewterz
Tags
| country: | Afghanistan China Nepal Pakistan |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Vulnerabilities - T1588.006 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | a72155f5-28bb-4ab0-b678-6e647b326162 |
| Fingerprint | eb8a24d3ee97ef5c |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | March 10, 2022, 11:34 a.m. |
| Added to db | Dec. 19, 2024, 5:56 a.m. |
| Last updated | Dec. 20, 2024, 1:03 a.m. |
| Headline | Rewterz Threat Alert – APT SideWinder Group – Active IOCs |
| Title | Rewterz Threat Alert – APT SideWinder Group – Active IOCs - Rewterz |
| Detected Hints/Tags/Attributes | 29/3/20 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | md5 | 2 | c8e1010b7ee1647b582048bfd67a9e0e |
|
| Details | md5 | 2 | 04effbbd901879abcd2834e530d5e9ad |
|
| Details | md5 | 2 | 7bcdef8e11c27e65e7016d145a24d195 |
|
| Details | md5 | 3 | 6162005b9ae5d4a8070bfe5f560b0912 |
|
| Details | md5 | 2 | c19201cbd7ad2221844268c0ba694a3a |
|
| Details | md5 | 2 | 277955afbf4ca44a018961f66a603f82 |
|
| Details | sha1 | 2 | 2a71114f70b711da6b46e2e35562e4326e09d8bc |
|
| Details | sha1 | 2 | a683f08912a3c845f0360f52a399f1774f9158c2 |
|
| Details | sha1 | 2 | c15a35dfbae4789b62b88ab268c5849255837edd |
|
| Details | sha1 | 3 | b4928e4c3a8787e0461e2e78138091134c7f719a |
|
| Details | sha1 | 2 | 3669f18e92eed9f4a0a8ee3df284798ff7a7a232 |
|
| Details | sha1 | 2 | d3862d50c36d03bab2d6b3f78c17f2fdd0704451 |
|
| Details | sha256 | 2 | 1a9d8b16ef6132884161bd820fe24cbfc8dc9514c3b31d7eacf4de707899dd6a |
|
| Details | sha256 | 2 | f7eb8fdb6eabb2fb64314c898c621c4aedb8c167c50bd62ad799fa2c0bc306b6 |
|
| Details | sha256 | 2 | 5e1ac5f28b37afc3b2a1902ee7c68485b3fcc55d648ff9e5309646a77ff53882 |
|
| Details | sha256 | 3 | d8aa512b03a5fc451f9b7bc181d842936798d5facf1b20a2d91d8fdd82aa28b7 |
|
| Details | sha256 | 2 | f44fd723398e148f7d437d22a417fd5b4c4f835a7b5a7c1624706e942320afa4 |
|
| Details | sha256 | 2 | 319bd26ad751a79b1b1c474749d3d856277b712f1eca3b1a88a8605a8f2facaf |
|
| Details | Threat Actor Identifier - APT-C | 37 | APT-C-17 |
|
| Details | Threat Actor Identifier by Tencent | 48 | T-APT-04 |