Targeted Attacks against Banks in the Middle East | Mandiant
Tags
attack-pattern: Data Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Software - T1592.002 Powershell - T1086 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID c820b8ec-f6fa-4c71-b324-a99ce4b742ed
Fingerprint f400ad524db6038e
Analysis status DONE
Considered CTI value 1
Text language
Published May 22, 2016, midnight
Added to db Nov. 9, 2023, 12:22 a.m.
Last updated Nov. 13, 2024, 7:21 p.m.
Headline Targeted Attacks against Banks in the Middle East
Title Targeted Attacks against Banks in the Middle East | Mandiant
Detected Hints/Tags/Attributes 55/1/11
Source URLs
Redirection Url
Details Source https://www.mandiant.com/resources/blog/targeted-attacks
URL Provider
Details Provider Source level domain
Details mandiant.com www.mandiant.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 330 ✔ Threat Intelligence https://www.mandiant.com/resources/blog/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 4 
go0gie.com
Details File 1 
%public%\libraries\ update.vbs
Details File 1 
%public%\libraries\update.vbs
Details File 1 
%public%\libraries\dns.ps1
Details File 16 
update.vbs
Details File 2 
sysupdate.aspx
Details File 5 
dns.ps1
Details IPv4 4 
35.35.35.35
Details Threat Actor Identifier - APT 258 
APT34
Details Url 1 
http://go0gie.com/sysupdate.aspx?req=xxx
Details Windows Registry Key 19 
HKEY_CURRENT_USER\Software\Microsoft\Terminal