Threat Source newsletter (March 16, 2023) — A deep dive into Talos' work in Ukraine
Tags
country: Ukraine
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Hardware - T1592.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID c64f7bde-37c4-419a-9e85-b8f57ba93140
Fingerprint 24563d97d6b7d40d
Analysis status DONE
Considered CTI value 2
Text language
Published March 16, 2023, 2:03 p.m.
Added to db March 16, 2023, 7:30 p.m.
Last updated Nov. 17, 2024, 12:58 p.m.
Headline Cisco Talos Intelligence Blog
Title Threat Source newsletter (March 16, 2023) — A deep dive into Talos' work in Ukraine
Detected Hints/Tags/Attributes 64/3/17
Source URLs
Redirection Url
Details Source https://blog.talosintelligence.com/threat-source-newsletter-march-16-2023-a-deep-dive-into-talos-work-in-ukraine/
URL Provider
Details Provider Source level domain
Details talosintelligence.com blog.talosintelligence.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 68 ✔ Cisco Talos Blog https://blog.talosintelligence.com/rss/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 176 
cve-2023-23397
Details Domain 127 
pua.win
Details Domain 36 
85.lp.ret.sbx.tg
Details File 8 
mssqlsrv.exe
Details File 17 
img001.exe
Details File 4 
teams15.exe
Details File 5 
variant.msi
Details md5 9 
d47fa115154927113b05bd3c8a308201
Details md5 37 
93fefc3e88ffb78abb36365fa5cf857c
Details md5 13 
3e10a74a7613d1cae4b9749d7ec93515
Details md5 4 
954a5fc664c23a7a97e09850accdfe8e
Details sha256 10 
00ab15b194cc1fc8e48e849ca9717c0700ef7ce2265511276f7015d7037d8725
Details sha256 27 
e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934
Details sha256 14 
5616b94f1a40b49096e2f8f78d646891b45c649473a5b67b8beddac46ad398e1
Details sha256 5 
de3908adc431d1e66656199063acbb83f2b2bfc4d21f02076fe381bb97afc423
Details IPv6 36 
c::85
Details IPv6 63 
::1201