Walkthrough — Proxy — Suspicious URL Detected — LetsDefend
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Network Devices - T1584.008 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Software - T1592.002 Vulnerabilities - T1588.006 Connection Proxy - T1090 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID c1be9f46-d3d3-481d-a277-e1791755a969
Fingerprint 14a209968d3a87cb
Analysis status DONE
Considered CTI value -2
Text language
Published Nov. 13, 2024, 11:04 a.m.
Added to db Nov. 13, 2024, 12:24 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Walkthrough — Proxy — Suspicious URL Detected — LetsDefend
Title Walkthrough — Proxy — Suspicious URL Detected — LetsDefend
Detected Hints/Tags/Attributes 51/2/7
Source URLs
Redirection Url
Details Source https://medium.com/@ikerlopez73/walkthrough-proxy-suspicious-url-detected-letsdefend-f0648460b58f?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
interalliance.org
Details File 1208 
powershell.exe
Details File 1 
swiftcopy.ps1
Details IPv4 1 
66.198.240.56
Details IPv4 1 
172.16.17.51
Details IPv4 3 
74.6.143.25
Details Url 1 
https://interalliance.org/come2/holme/folde/swiftcopy.ps1