Abraham's Ax Likely Linked to Moses Staff
Tags
country: Iran Israel Saudi Arabia
attack-pattern: Data Direct Models Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Social Media - T1593.001 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID c7120c47-ac0f-4121-a78f-a98558859c4b
Fingerprint bda11dcba3690347
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 26, 2023, midnight
Added to db June 5, 2023, 11:37 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Abraham's Ax Likely Linked to Moses Staff
Title Abraham's Ax Likely Linked to Moses Staff
Detected Hints/Tags/Attributes 66/2/21
Source URLs
Redirection Url
Details Source https://www.secureworks.com/blog/abrahams-ax-likely-linked-to-moses-staff
URL Provider
Details Provider Source level domain
Details secureworks.com www.secureworks.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 225 ✔ — https://secureworks.com/rss?feed=blog&category=research-intelligence 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 2 
moses-staff.se
Details Domain 1 
abrahams-ax.nu
Details Domain 1 
abrahams-ax.se
Details File 1 
brokerhost.exe
Details File 2 
agent4.exe
Details File 312 
calc.exe
Details File 13 
broker.exe
Details md5 1 
ff15558085d30f38bc6fd915ab3386b5
Details md5 1 
9ee5bb655cbccbeb75d021fdd1fde3ac
Details md5 1 
5cacfad2bb7979d7e823a92fb936c592
Details md5 1 
a70d6bbf2acb62e257c98cb0450f4fec
Details md5 1 
cafa8038ea7e46860c805da5c8c1aa38
Details md5 1 
da070fa7d540f4b41d5e7391aa9a8079
Details md5 1 
76a35d4087a766e2a5a06da7e25ef76a
Details md5 1 
63c4c31965ed08a3207d44e885ebd5e4
Details md5 1 
1d84159252ed3fc814074312b85f6299
Details md5 1 
3e0476b27c21eec6cc1cc5c5818467e7
Details md5 1 
7a5d75db6106d530d5fdd04332c68cd7
Details md5 1 
aba68c4b4482e475e2d4b9bf54761b95
Details IPv4 1 
95.169.196.52
Details IPv4 1 
95.169.196.55