‘Oto Gonderici’ Excel formula injections target Turkish victims
Tags
country: France Turkey
maec-delivery-vectors: Watering Hole
attack-pattern: Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Junk Data - T1001.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Visual Basic - T1059.005 Tool - T1588.002 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID bfd81241-b96a-41b9-8570-117f6ed71e0e
Fingerprint 242089172af5a663
Analysis status DONE
Considered CTI value 0
Text language
Published July 11, 2019, 4:05 p.m.
Added to db Jan. 18, 2023, 10:04 p.m.
Last updated Nov. 19, 2024, 8:52 p.m.
Headline ‘Oto Gonderici’ Excel formula injections target Turkish victims
Title ‘Oto Gonderici’ Excel formula injections target Turkish victims
Detected Hints/Tags/Attributes 63/3/12
Source URLs
Redirection Url
Details Source https://news.sophos.com/en-us/2019/07/11/oto-gonderici-excel-formula-injections-target-turkish-victims/
URL Provider
Details Provider Source level domain
Details sophos.com news.sophos.com
Attributes
Details Type #Events CTI Value
Details Domain 2 
localhost.com
Details Domain 340 
system.net
Details File 2134 
cmd.exe
Details File 1 
favori.ico
Details File 1212 
index.php
Details File 1 
d:\hacktol\sourcm\_projelerim\smtp_oto_gonder\oto_mail_gonderici.vb
Details File 1 
d:\hacktol\sourcm\_projelerim\spam_builder\sexploit.vb
Details File 1 
e0h2mk.jar
Details IPv4 1 
94.23.170.118
Details IPv4 1 
54.36.212.133
Details IPv4 1 
51.15.225.63
Details IPv4 1 
51.158.125.92