Appleseed Being Distributed to Nuclear Power Plant-Related Companies - ASEC BLOG
Tags
| country: | North Korea |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Data Double File Extension - T1036.007 Malware - T1587.001 Malware - T1588.001 Regsvr32 - T1218.010 Software - T1592.002 Regsvr32 - T1117 |
Common Information
| Type | Value |
|---|---|
| UUID | b79f8ee7-8a7f-400d-b654-81cd198f0343 |
| Fingerprint | 2507bc6d0dff07db |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Nov. 2, 2022, 10:49 a.m. |
| Added to db | Nov. 7, 2022, 7:40 p.m. |
| Last updated | Nov. 17, 2024, 11:40 p.m. |
| Headline | Appleseed Being Distributed to Nuclear Power Plant-Related Companies |
| Title | Appleseed Being Distributed to Nuclear Power Plant-Related Companies - ASEC BLOG |
| Detected Hints/Tags/Attributes | 23/3/11 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://asec.ahnlab.com/en/41015/ |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 17 | ✔ | ASEC | https://asec.ahnlab.com/en/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 2 | ndt.info.gf |
|
| Details | File | 2 | xls.vbs |
|
| Details | File | 2 | 배치도_고리2호기isi.pdf |
|
| Details | File | 1 | layout_korino2isi.pdf |
|
| Details | File | 2 | rsckpc.bat |
|
| Details | File | 2 | ndt.inf |
|
| Details | File | 1206 | index.php |
|
| Details | File | 4 | vbs.vbs |
|
| Details | md5 | 2 | 55a9a935b36da90fb5a7ab814d567a40 |
|
| Details | md5 | 2 | ba83312ea92c284c710bcc0906a29fb1 |
|
| Details | Url | 2 | http://ndt.info.gf/index.php |