Indicators of Malware Inside Enterprise
Tags
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Exploits - T1587.004 Exploits - T1588.005 Hidden Files And Directories - T1564.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Mshta - T1218.005 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006 Browser Extensions - T1176 Hidden Files And Directories - T1158 Mshta - T1170 Powershell - T1086 Rootkit - T1014 Rootkit
Show in Graph
Common Information
Type Value
UUID cc3660b6-c8d4-4af1-b342-20e0d6ab4125
Fingerprint b453dc3ae7330ec3
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 19, 2024, 12:22 p.m.
Added to db Oct. 19, 2024, 2:59 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Indicators of Malware Inside Enterprise
Title Indicators of Malware Inside Enterprise
Detected Hints/Tags/Attributes 82/1/6
Source URLs
Redirection Url
Details Source https://medium.com/@mjohn-sec/indicators-of-malware-inside-enterprise-88a08cfe3e78?source=rss------malware-5
Details Source https://medium.com/@mjohn-sec/indicators-of-malware-inside-enterprise-88a08cfe3e78?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Details 171 ✔ Malware on Medium https://medium.com/feed/tag/malware 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 367 
readme.txt
Details File 29 
decrypt.txt
Details File 1208 
powershell.exe
Details File 1260 
explorer.exe
Details File 1 
c:\malicious.exe
Details Windows Registry Key 188 
HKCU\Software\Microsoft\Windows\CurrentVersion\Run