Hunter Exploit Kit Targets Banking Customers | Proofpoint
Tags
country: Brazil
maec-delivery-vectors: Watering Hole
attack-pattern: Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Web Service - T1481 Vulnerabilities - T1588.006 Powershell - T1086 Web Service - T1102
Show in Graph
Common Information
Type Value
UUID cedb8b87-dca4-4dec-aa5d-5cd65f665bbe
Fingerprint b41009fd8b0cf6af
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 27, 2015, 11:45 p.m.
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline Hunter Exploit Kit Targets Brazilian Banking Customers
Title Hunter Exploit Kit Targets Banking Customers | Proofpoint
Detected Hints/Tags/Attributes 62/3/22
Source URLs
Redirection Url
Details Source https://www.proofpoint.com/us/threat-insight/post/Hunter-Exploit-Kit-Targets-Brazilian-Banking-Customers
URL Provider
Details Provider Source level domain
Details proofpoint.com www.proofpoint.com
Attributes
Details Type #Events CTI Value
Details CVE 24 
cve-2015-5122
Details CVE 59 
cve-2015-5119
Details CVE 18 
cve-2015-3113
Details CVE 8 
cve-2015-3105
Details CVE 25 
cve-2015-2419
Details CVE 55 
cve-2014-6332
Details CVE 23 
cve-2013-2465
Details CVE 2 
cve-2013-3993
Details CVE 2 
cve-2012-1710
Details Domain 1 
whittwcnoogia.com.br
Details Domain 397 
www.microsoft.com
Details Domain 370 
www.proofpoint.com
Details Domain 1 
bolasuporte.com.br
Details File 1204 
index.php
Details File 1 
4331596349.exe
Details File 3 
reader.exe
Details File 1 
insidtmlekes.exe
Details File 18 
entry.aspx
Details File 1 
%appdata%\local\dragon\reader.exe
Details Url 2 
http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?name=win32
Details Url 1 
https://www.proofpoint.com/us/threat-insight/post/its-not-personal-its-business
Details Windows Registry Key 1 
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Adobe