Sandworm: A tale of disruption told anew | WeLiveSecurity
Tags
country: France Georgia Poland Russia Ukraine United States Of America
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Email Accounts - T1585.002 Email Accounts - T1586.002 Firmware - T1592.003 Hardware - T1592.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Social Media - T1593.001 Software - T1592.002 Ssh - T1021.004 Tool - T1588.002 Connection Proxy - T1090 Rootkit - T1014 Rootkit
Show in Graph
Common Information
Type Value
UUID c70de86c-5606-4f30-aa59-5ed2e8f4f266
Fingerprint b7342951803187c2
Analysis status DONE
Considered CTI value 1
Text language
Published March 21, 2022, 11:30 a.m.
Added to db June 15, 2023, 11:02 a.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Sandworm: A tale of disruption told anew
Title Sandworm: A tale of disruption told anew | WeLiveSecurity
Detected Hints/Tags/Attributes 140/2/5
Source URLs
Redirection Url
Details Source https://www.welivesecurity.com/2022/03/21/sandworm-tale-disruption-told-anew/
URL Provider
Details Provider Source level domain
Details welivesecurity.com www.welivesecurity.com
Attributes
Details Type #Events CTI Value
Details Domain 145 
api.telegram.org
Details Domain 2 
um10eset.net
Details File 70 
e.doc
Details File 3 
moonraker.dll
Details Threat Actor Identifier - APT 783 
APT28