Hive0117 Continues Fileless Malware Delivery in Eastern Europe
Tags
| country: | Estonia Germany Lithuania Russia Ukraine |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Data Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | c9813b3c-0960-4f2d-bbb3-94d3b6d1dada |
| Fingerprint | ac160999a7778fc1 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | April 26, 2022, midnight |
| Added to db | Aug. 31, 2024, 8:18 a.m. |
| Last updated | Sept. 22, 2024, 3:33 p.m. |
| Headline | Hive0117 continues fileless malware delivery in Eastern Europe |
| Title | Hive0117 Continues Fileless Malware Delivery in Eastern Europe |
| Detected Hints/Tags/Attributes | 60/3/14 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 227 | ✔ | X-Force – Security Intelligence | https://securityintelligence.com/category/x-force/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | shtampuy.ru |
|
| Details | Domain | 1 | r77.fssprus.ru |
|
| Details | Domain | 1 | r77.fssp.gov.ru |
|
| Details | Domain | 1 | xxxxxxx-22.zip |
|
| Details | Domain | 1 | 30.12.2021.zip |
|
| Details | Domain | 1 | domtut.site |
|
| Details | Domain | 1 | d303790c.top |
|
| Details | File | 1 | xxxxxxx-22.zip |
|
| Details | File | 1 | 2021.zip |
|
| Details | File | 2 | 12-6317-3621.exe |
|
| Details | IBM X-Force - Unattributed Threat Actor | 4 | Hive0117 |
|
| Details | IPv4 | 1 | 185.64.76.158 |
|
| Details | IPv4 | 1 | 103.153.157.33 |
|
| Details | Url | 1 | https://r77.fssp.gov.ru |