TA558 Targeting Brazil
Tags
country: Brazil Laos
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Msbuild - T1127.001 Powershell - T1059.001 Scheduled Task - T1053.005 Powershell - T1086 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID c4e128f5-ca34-43b5-ad39-296c8a09b433
Fingerprint a82b01b123390ba0
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 26, 2024, 4:25 p.m.
Added to db Aug. 31, 2024, 10:56 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline somedieyoungZZ
Title TA558 Targeting Brazil
Detected Hints/Tags/Attributes 31/2/15
Source URLs
Redirection Url
Details Source https://somedieyoungzz.github.io//posts/ta558/
Details Source https://somedieyoungzz.github.io/posts/ta558/
URL Provider
Details Provider Source level domain
Details github.io somedieyoungzz.github.io
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 432 ✔ somedieyoungZZ https://somedieyoungzz.github.io/feed.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
detail-booking.com.br
Details Domain 339 
system.net
Details Domain 1373 
twitter.com
Details File 1 
top.pdf
Details File 1208 
powershell.exe
Details File 72 
regsvcs.exe
Details File 149 
msbuild.exe
Details File 6 
js.js
Details md5 1 
878a39b1a17ad10ed89c87508db353c0
Details sha1 1 
ed51f59febba6bd664cd888663706c792095b15d
Details sha256 1 
a7d66996766f77003618bcd786611e68d19e41a4777a7854b5936fcc02e9f349
Details IPv4 1 
187.17.111.35
Details Url 1 
https://detail-booking.com.br/top.pdf
Details Url 1 
https://detail-booking.com.br
Details Url 9 
https://twitter.com/idanotpro