Rewterz Threat Alert – Raccoon Infostealer Targeted Financial Organization - Rewterz
Tags
| country: | Russia |
| attack-pattern: | Model Malware - T1587.001 Malware - T1588.001 |
Common Information
| Type | Value |
|---|---|
| UUID | cf2902ab-633a-48ec-a518-b2360818fbd5 |
| Fingerprint | 4face8d12e1daf4d |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Nov. 26, 2019, 11:32 a.m. |
| Added to db | Dec. 19, 2024, 4:15 a.m. |
| Last updated | Dec. 19, 2024, 8:05 a.m. |
| Headline | Rewterz Threat Alert – Raccoon Infostealer Targeted Financial Organization |
| Title | Rewterz Threat Alert – Raccoon Infostealer Targeted Financial Organization - Rewterz |
| Detected Hints/Tags/Attributes | 21/2/13 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 4 | cve-2018-9195 |
|
| Details | Domain | 7 | libs.zip |
|
| Details | md5 | 1 | 0c8158e2a4267eea51e12b6890e68da8 |
|
| Details | md5 | 2 | f7bcb18e5814db9fd51d0ab05f2d7ee9 |
|
| Details | sha1 | 1 | a0e613e89ea1dcac9758c395bc2d46ba6944a666 |
|
| Details | sha1 | 1 | 2963e100530c794e859bd850793db192fc7eb522 |
|
| Details | sha256 | 1 | e04bbd216bf39330dc5a007937af25b2cc61a51ea402a3c6a0cd4ade137c5d04 |
|
| Details | sha256 | 1 | 19a2a1c2ee8d432c56cded783f9eb0026096990112bcd97f13e79de77bad2ad1 |
|
| Details | IPv4 | 2 | 34.89.185.248 |
|
| Details | Url | 1 | http://34.89.185.248/file_handler/file.php |
|
| Details | Url | 1 | http://34.89.185.248/gate/libs.zip |
|
| Details | Url | 1 | http://34.89.185.248/gate/log.php |
|
| Details | Url | 1 | http://34.89.185.248/gate/sqlite3.dll |