“El Machete”
Tags
country: Venezuela China Cuba Colombia Ecuador Spain Laos Peru
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID b333700c-3da3-427b-b7e8-9c405fcc046e
Fingerprint d125815b8e039200
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 20, 2014, 6:30 a.m.
Added to db Sept. 26, 2022, 9:31 a.m.
Last updated Nov. 8, 2024, 10:23 p.m.
Headline “El Machete”
Title “El Machete”
Detected Hints/Tags/Attributes 52/2/30
Source URLs
Redirection Url
Details Source https://securelist.com/blog/research/66108/el-machete/
Details Source https://securelist.com/el-machete/66108/
URL Provider
Details Provider Source level domain
Details securelist.com securelist.com
Attributes
Details Type #Events CTI Value
Details Domain 19 
www.trustedsec.com
Details Domain 1 
name.domain.org
Details Domain 3 
java.serveblog.net
Details Domain 1 
agaliarept.com
Details Domain 1 
frejabe.com
Details Domain 1 
grannegral.com
Details Domain 1 
plushbr.com
Details Domain 1 
xmailliwx.com
Details Domain 1 
blogwhereyou.com
Details Domain 338 
kaspersky.com
Details Email 147 
intelreports@kaspersky.com
Details File 1 
xxx.pps
Details File 1 
suntzu.rar
Details File 1 
guerra.rar
Details File 2 
xxx.rar
Details File 1 
signed_update.jar
Details File 1 
awgxubv31pgv.exe
Details File 1 
guerra.exe
Details File 87 
java.exe
Details File 1 
trojan-spy.py
Details md5 1 
61d33dc5b257a18eb6514e473c1495fe
Details md5 1 
b5ada760476ba9a815ca56f12a11d557
Details md5 1 
d6c112d951cb48cab37e5d7ebed2420b
Details md5 1 
df2889df7ac209e7b696733aa6b52af5
Details md5 1 
e486eddffd13bed33e68d6d8d4052270
Details md5 1 
e9b2499b92279669a09fef798af7f45b
Details md5 1 
f7e23b876fc887052ac8e2558f0d6c38
Details md5 1 
b26d1aec219ce45b2e80769368310471
Details Url 1 
https://www.trustedsec.com/downloads/social-engineer-toolkit
Details Url 1 
http://name.domain.org/nickname/set/signed_update.jar