Rewterz Threat Alert – North Korean APT Kimsuky Aka Black Banshee – Active IOCs
Tags
country: Japan South Korea United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Password Cracking - T1110.002 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Software - T1592.002 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID c1efe268-7c7d-41b8-9f23-f40099a5b5b2
Fingerprint 8e2481818905d96c
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 2, 2023, 8:34 a.m.
Added to db Aug. 7, 2023, 11 a.m.
Last updated Sept. 4, 2024, 4:41 a.m.
Headline Rewterz Threat Alert – North Korean APT Kimsuky Aka Black Banshee – Active IOCs
Title Rewterz Threat Alert – North Korean APT Kimsuky Aka Black Banshee – Active IOCs
Detected Hints/Tags/Attributes 59/3/18
Source URLs
Redirection Url
Details Source https://www.rewterz.com/rewterz-news/rewterz-threat-alert-north-korean-apt-kimsuky-aka-black-banshee-active-iocs-14/
URL Provider
Details Provider Source level domain
Details rewterz.com www.rewterz.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 365 ✔ — https://www.rewterz.com/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 6 
cve-2023-20215
Details CVE 7 
cve-2023-38138
Details Domain 4 
partner24.kr
Details File 4 
biz.php
Details File 4 
doc1.php
Details File 4 
doc2.php
Details md5 4 
8a5fd1e9c9841ff0253b2a6f1e533d0e
Details md5 4 
002105e21f1bddf68e59743c440e416a
Details md5 4 
b6614471ebf288689d33808c376540e1
Details sha1 1 
2a09b2542a920477432232ffddc89560eb334645
Details sha1 1 
c95c2dff5647114e81bf1aa1487c5f868e5b73e4
Details sha1 1 
84ef8256bece765b0f44dc6d4cf664cb8f222c59
Details sha256 1 
51a0d350c910a357476db7079c27d1384d58b285cd4a9998b77bdb789d848107
Details sha256 1 
de4cac7950d1bb99c86ab9ac86d94c3ed48a088b121245c3239f140a8fc2fcc4
Details sha256 1 
928e61590b2c4acf3991bd4327c5107c1cfd2604d992647c4e63bd1d620ff636
Details Url 4 
https://partner24.kr/mokozy/hope/biz.php
Details Url 4 
https://partner24.kr/mokozy/hope/doc1.php
Details Url 4 
https://partner24.kr/mokozy/hope/doc2.php