New Mustang Panda’s campaing against Australia
Tags
| country: | Australia China France United Kingdom United States Of America |
| attack-pattern: | Malware - T1587.001 Malware - T1588.001 Software - T1592.002 |
Common Information
| Type | Value |
|---|---|
| UUID | a87e5dea-9cc7-4721-b388-98c515e030f6 |
| Fingerprint | 73b99e04f1e1a889 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | May 3, 2023, 5:50 p.m. |
| Added to db | June 5, 2023, 2:11 p.m. |
| Last updated | Nov. 17, 2024, 5:57 p.m. |
| Headline | New Mustang Panda’s campaing against Australia |
| Title | New Mustang Panda’s campaing against Australia |
| Detected Hints/Tags/Attributes | 41/2/21 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://lab52.io/blog/new-mustang-pandas-campaing-against-australia/ |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 148 | ✔ | lab52 | https://lab52.io/blog/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 3 | farrell.zip |
|
| Details | Domain | 2 | www.asia.microsoft.com |
|
| Details | Domain | 261 | blog.talosintelligence.com |
|
| Details | Domain | 3 | gblogs.cisco.com |
|
| Details | File | 2 | farrell.zip |
|
| Details | File | 2 | farrell.exe |
|
| Details | File | 3 | solidpdfcreator.dll |
|
| Details | File | 20 | c:\windows\syswow64\cmd.exe |
|
| Details | File | 2 | c:\users\public\libraries\phototvrhd\solidpdfcreator.dll |
|
| Details | File | 2 | c:\users\public\libraries\phototvrhd\solidpdfcreator.exe |
|
| Details | sha256 | 1 | 4fbfbf1cd2efaef1906f0bd2195281b77619b9948e829b4d53bf1f198ba81dc5 |
|
| Details | sha256 | 2 | e2acbc36c2cce4050e34033c12f766fea58b4196d84cf40e979fac8fed24c942 |
|
| Details | sha256 | 2 | 3c4671b4a0c3e7da186bd356e07cf0daca7267addde668044b1ded42c6dbe09b |
|
| Details | sha256 | 1 | 5dde3bca0e5319c62d547bd0c37e621f2050598a347447bde832a9fc37efd97d |
|
| Details | sha256 | 1 | 167a842b97d0434f20e0cd6cf73d07079255a743d26606b94fc785a0f3c6736e |
|
| Details | sha256 | 1 | 41276827827b95c9b5a9fbd198b7cff2aef6f90f2b2b3ea84fadb69c55efa171 |
|
| Details | sha256 | 1 | f8e6b2e537325d6775d35755c8fe19ef89b27e1a7aba183490fbcbf2d52c15f4 |
|
| Details | IPv4 | 2 | 123.253.35.231 |
|
| Details | Url | 3 | https://blog.talosintelligence.com/mustang-panda-targets-europe |
|
| Details | Url | 1 | https://gblogs.cisco.com/jp/2022/05/talos-mustang-panda-targets-europe |
|
| Details | Windows Registry Key | 582 | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run |