toolsmith #132 - The HELK vs APTSimulator - Part 2
Common Information
Type Value
UUID b6e511a0-6f8f-45a6-879a-6366b117f29a
Fingerprint a7930dfac43f09bf
Analysis status DONE
Considered CTI value 0
Text language
Published April 3, 2018, 12:01 a.m.
Added to db Jan. 18, 2023, 9:47 p.m.
Last updated Nov. 18, 2024, 1:38 a.m.
Headline UNKNOWN
Title toolsmith #132 - The HELK vs APTSimulator - Part 2
Detected Hints/Tags/Attributes 38/2/9
Attributes
Details Type #Events CTI Value
Details Domain 1
jupyter.org
Details Domain 3
spark.read
Details File 4
spark.sql
Details File 2127
cmd.exe
Details File 376
wscript.exe
Details File 1018
rundll32.exe
Details File 1209
powershell.exe
Details File 249
schtasks.exe
Details File 1
schtasks.bat