Xollam the Latest Face of TargetCompany
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Datasets Model Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006 Powershell - T1086 Rootkit - T1014 Rootkit
Show in Graph
Common Information
Type Value
UUID c8b8f3d3-5526-47fe-8024-52382db11d3d
Fingerprint a694a8db0b77e575
Analysis status DONE
Considered CTI value 0
Text language
Published June 6, 2023, midnight
Added to db Oct. 15, 2024, 4:08 p.m.
Last updated Nov. 17, 2024, 6:49 p.m.
Headline Xollam, the Latest Face of TargetCompany
Title Xollam the Latest Face of TargetCompany
Detected Hints/Tags/Attributes 63/2/4
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_my/research/23/f/xollam-the-latest-face-of-targetcompany.html
Details Source https://www.trendmicro.com/en_sg/research/23/f/xollam-the-latest-face-of-targetcompany.html
Details Source https://www.trendmicro.com/en_au/research/23/f/xollam-the-latest-face-of-targetcompany.html
Details Source https://www.trendmicro.com/en_in/research/23/f/xollam-the-latest-face-of-targetcompany.html
Details Source https://www.trendmicro.com/en_nz/research/23/f/xollam-the-latest-face-of-targetcompany.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details Domain 25 
the.net
Details File 142 
wmiprvse.exe
Details File 6 
ydark.exe
Details File 5 
killer.bat