From Cybercrime to Cyberpropaganda
Tags
| country: | Libya |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Data Domains - T1583.001 Domains - T1584.001 Dynamic Dns - T1311 Dynamic Dns - T1333 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Social Media - T1593.001 |
Common Information
| Type | Value |
|---|---|
| UUID | d2d24b48-4769-40a7-bd5a-9be71ec78b22 |
| Fingerprint | b01007536e3cc2fb |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Oct. 16, 2017, midnight |
| Added to db | Jan. 18, 2023, 9:02 p.m. |
| Last updated | Aug. 31, 2024, 9:58 p.m. |
| Headline | From Cybercrime to Cyberpropaganda |
| Title | From Cybercrime to Cyberpropaganda |
| Detected Hints/Tags/Attributes | 47/3/13 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | sha256 | 1 | cd8329f75b1393ead3e16c6c79ee1ab476e6487370481e5931feb63305f00983 |
|
| Details | sha256 | 1 | f46f0e8eed0361294200d64e87b3fb13f6a3797f99f5b588444534f27612a590 |
|
| Details | sha256 | 1 | fd883a978dd6d95fa5c3b5e0a154e0e07b06e7cb6c685f1ca9f58c73122df24d |
|
| Details | sha256 | 1 | 7413c7c0317e49e49d595408f721c2ab2f120215374accf2f8133c9d9ad603fb |
|
| Details | sha256 | 1 | 89427241e26748949c235fc43805c72960d9c2711fa72036c33137648bb475fa |
|
| Details | sha256 | 1 | fb5b5906feab268f90789b15351b8a193fb5f445a3ae9afb1da8fb814ed80325 |
|
| Details | sha256 | 1 | 306f4f843c5a5a119a3385ad2b18c78a04fac618031ddecabf0633083a6c9a76 |
|
| Details | sha256 | 1 | 33709ca050fd0abc2aba38326996bf1c3b6d9b875228c9f15e624f9002c199a8 |
|
| Details | sha256 | 1 | ff0f9057d3da7b3500f145ce24670c89a93cdb5cbe74946b17397fc466ddfbda |
|
| Details | sha256 | 1 | 9b7cc8f4807df162f99f5fa592bc7cc5c6a756d9c0311c7b2529f19a0ac59c1a |
|
| Details | sha256 | 1 | 587e38fb11bd0c4021ce6965e92838521616ee4c5506ef0fa160452e9c71d5cf |
|
| Details | Yara rule | 1 | rule layer1_vbs {
strings:
$vbs = /[a-z]+ = [a-z]+ & ChrW\(AscW\(Mid\([a-z]+, [a-z]+, 1\)\) [a-z]+ \* [a-z]+\)/ wide
condition:
$vbs
} |
|
| Details | Yara rule | 1 | rule layer0_vbs {
strings:
$code = /Dim \w+\s+\r\n\s+For Each \w+ In split\(\w+,".+"\)\r\n\s+\w+ = \w+ & ChrW\(\w+ "\d+"\)/
condition:
$code
} |