Rewterz Threat Alert – Kimsuky APT Group – Active IOCs - Rewterz
Tags
| country: | Japan South Korea United States Of America |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Data Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | b82c2b14-c76e-466f-9978-1360e7117e19 |
| Fingerprint | 89bac8d12ec5cfca |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Aug. 24, 2022, 11:30 a.m. |
| Added to db | Dec. 19, 2024, 11:26 a.m. |
| Last updated | Dec. 19, 2024, 11:27 a.m. |
| Headline | Rewterz Threat Alert – Kimsuky APT Group – Active IOCs |
| Title | Rewterz Threat Alert – Kimsuky APT Group – Active IOCs - Rewterz |
| Detected Hints/Tags/Attributes | 37/3/6 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 5 | uppgrede.scienceontheweb.net |
|
| Details | File | 3 | 대응방향.doc |
|
| Details | md5 | 4 | 4de19e2c39b1d193e171dc8d804005a4 |
|
| Details | sha1 | 1 | c0ee5199cc15ed05fc6edf62a193deb819572cee |
|
| Details | sha256 | 1 | 6a435e2aab6dce39d626eacb39fc964967e35e94abf513da0f6511ab7b1f826e |
|
| Details | Url | 3 | http://uppgrede.scienceontheweb.net/file/upload/list.php?query=1 |