Mapping the connections inside Russia's APT Ecosystem - Check Point Research
Tags
country: Ethiopia Russia
attack-pattern: Data Direct Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Credential Dumping - T1003
Show in Graph
Common Information
Type Value
UUID c37abf0c-8a58-4bd4-9f63-fc6bed42dbb0
Fingerprint 373c2bb5c7318781
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 24, 2019, 12:57 p.m.
Added to db Feb. 17, 2023, 11:39 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Mapping the connections inside Russia’s APT Ecosystem
Title Mapping the connections inside Russia's APT Ecosystem - Check Point Research
Detected Hints/Tags/Attributes 80/2/5
Source URLs
Redirection Url
Details Source https://research.checkpoint.com/2019/russianaptecosystem/
Details Source https://research.checkpoint.com/russianaptecosystem/
URL Provider
Details Provider Source level domain
Details checkpoint.com research.checkpoint.com
Attributes
Details Type #Events CTI Value
Details sha256 2 
0ce3bfa972ced61884ae7c1d77c7d4c45e17c7d767e669610cf2ef72b636b464
Details sha256 2 
3cf46c68dccb989fbda3f853cc19025d39d38d9ea5786f4ae6a926677d6c5f62
Details sha256 3 
11b7b8a7965b52ebb213b023b6772dd2c76c66893fc96a18a9a33c8cf125af80
Details sha256 3 
fc54d8afd2ce5cb6cc53c46783bf91d0dd19de604308d536827320826bc36ed9
Details Threat Actor Identifier - APT 665 
APT29