SafeBreach Coverage for AA24-249A (GRU Unit 29155)
Tags
country: Laos Russia Ukraine United States Of America
attack-pattern: Data Reputational Harm Confluence - T1213.001 Credentials - T1589.001 Ip Addresses - T1590.005 Lsass Memory - T1003.001 Malware - T1587.001 Malware - T1588.001 Pass The Hash - T1550.002 Password Spraying - T1110.003 Powershell - T1059.001 Rundll32 - T1218.011 Server - T1583.004 Server - T1584.004 Software - T1592.002 Video Capture - T1512 Vulnerabilities - T1588.006 Connection Proxy - T1090 Pass The Hash - T1075 Powershell - T1086 Rundll32 - T1085 Video Capture - T1125
Show in Graph
Common Information
Type Value
UUID b11fe335-e0c7-4f6e-8f21-75200d80b6ee
Fingerprint b4b8e4d9cab286d0
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 6, 2024, 1:39 p.m.
Added to db Sept. 7, 2024, 4:15 a.m.
Last updated Nov. 17, 2024, 5:55 p.m.
Headline SafeBreach Coverage for AA24-249A (GRU Unit 29155)
Title SafeBreach Coverage for AA24-249A (GRU Unit 29155)
Detected Hints/Tags/Attributes 100/2/13
Source URLs
Redirection Url
Details Source https://securityboulevard.com/2024/09/safebreach-coverage-for-aa24-249a-gru-unit-29155/
URL Provider
Details Provider Source level domain
Details securityboulevard.com securityboulevard.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 226 ✔ Security Boulevard https://securityboulevard.com/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CERT Ukraine 49 
UAC-0056
Details CVE 9 
cve-2021-33044
Details CVE 9 
cve-2021-33045
Details CVE 122 
cve-2022-26134
Details CVE 20 
cve-2022-26138
Details CVE 27 
cve-2022-3236
Details Domain 23 
kali.org
Details Domain 16 
www.safebreach.com
Details File 76 
netsh.exe
Details File 72 
www.safe
Details Mandiant Uncategorized Groups 37 
UNC2589
Details Deprecated Microsoft Threat Actor Naming Taxonomy (Groups in development) 51 
DEV-0586
Details Url 1 
https://www.safebreach.com/blog/safebreach-coverage-for-us-cert-alert-aa24-249a-gru-unit-29155