hashtalk 010: supply chain attack vulnerabilities and writeup for tryhackme’s Lottie room
Tags
cmtmf-attack-pattern: Supply Chain Compromise
maec-delivery-vectors: Watering Hole
attack-pattern: Data Indirect Cdns - T1596.004 Cloud Services - T1021.007 Code Repositories - T1213.003 Code Repositories - T1593.003 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Hardware - T1592.001 Impersonation - T1656 Network Devices - T1584.008 Phishing - T1660 Phishing - T1566 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Supply Chain Compromise - T1474 Vulnerabilities - T1588.006 Supply Chain Compromise - T1195 Supply Chain Compromise
Show in Graph
Common Information
Type Value
UUID b74db0e7-976a-44f4-92a3-da031d4d57c2
Fingerprint aca93c938a06a660
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 3, 2024, 8:51 p.m.
Added to db Dec. 3, 2024, 10:10 p.m.
Last updated Dec. 25, 2024, 4:36 a.m.
Headline hashtalk 010: supply chain attack vulnerabilities and writeup for tryhackme’s Lottie room
Title hashtalk 010: supply chain attack vulnerabilities and writeup for tryhackme’s Lottie room
Detected Hints/Tags/Attributes 75/3/26
Source URLs
Redirection Url
Details Source https://eva-georgieva.medium.com/hashtalk-010-supply-chain-attack-vulnerabilities-and-writeup-for-tryhackmes-lottie-room-2db32da539c2?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com eva-georgieva.medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 239 
min.js
Details File 169 
package.json
Details File 187 
index.js
Details File 16 
object.key
Details File 400 
console.log
Details File 2 
pushtocdn.php
Details File 12 
bundle.js
Details sha1 1 
1402a9dbe347d2cdab8bce095bfd150ca0eaec3f
Details IPv4 1 
10.10.93.242
Details IPv4 677 
0.0.0.0
Details IPv4 1 
10.10.1.196
Details Url 2 
https://keys.coinbase.com/connect",e.walletlink_url="https://www.walletlink.org",e.cbw_mobile_deeplink_url="https://go.cb-w.com/walletlink
Details Url 2 
http://npm.thm:4873/-/web/detail/form-validator
Details Url 2 
http://npm.thm:4873
Details Url 1 
http://npm.thm:4873/.
Details Url 1 
http://10.10.93.242:8080/pushtocdn.php
Details Url 1 
http://0.0.0.0:9090
Details Url 3 
https://calendly.com/evaincybersec/h-shtalks
Details Domain 5 
castleservices01.com
Details Domain 2 
formdata.email
Details Domain 1297 
gmail.com
Details Domain 10 
calendly.com
Details Email 8 
evaincybersec@gmail.com
Details File 2 
e.wallet
Details File 4 
www.wallet
Details File 2 
n.tar