Hackers stole data from US defense org using Impacket, CovalentStealer
Tags
attack-pattern: Data Credentials - T1589.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Web Service - T1481 Virtual Private Server - T1583.003 Web Services - T1583.006 Virtual Private Server - T1584.003 Web Services - T1584.006 Vulnerabilities - T1588.006 Powershell - T1086 Web Service - T1102
Show in Graph
Common Information
Type Value
UUID b2592e3f-5f57-4bca-822f-d128bc351a0e
Fingerprint b53118d5abb29253
Analysis status DONE
Considered CTI value 2
Text language
Published Oct. 4, 2022, midnight
Added to db Oct. 6, 2022, 10:01 a.m.
Last updated Nov. 17, 2024, 5:56 p.m.
Headline Hackers stole data from US defense org using Impacket, CovalentStealer
Title Hackers stole data from US defense org using Impacket, CovalentStealer
Detected Hints/Tags/Attributes 61/1/4
Source URLs
Redirection Url
Details Source https://www.bleepingcomputer.com/news/security/us-govt-hackers-stole-data-from-us-defense-org-using-new-malware/
URL Provider
Details Provider Source level domain
Details bleepingcomputer.com www.bleepingcomputer.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 162 ✔ — https://media.cert.europa.eu/rss?type=category&id=APTFilter&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 184 
cve-2021-26855
Details CVE 90 
cve-2021-26857
Details CVE 92 
cve-2021-26858
Details CVE 126 
cve-2021-27065