MontysThree: Industrial espionage with steganography and a Russian accent on both sides
Tags
cmtmf-attack-pattern: Masquerading
country: Russia
attack-pattern: Data Cloud Services - T1021.007 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Private Keys - T1552.004 Rundll32 - T1218.011 Software - T1592.002 Steganography - T1001.002 Steganography - T1406.001 Steganography - T1027.003 Thread Local Storage - T1055.005 Masquerading - T1036 Private Keys - T1145 Rundll32 - T1085 Masquerading
Show in Graph
Common Information
Type Value
UUID d47514b6-cd22-4478-b357-c4b4fa5deb07
Fingerprint 3c143978adb1b4d3
Analysis status DONE
Considered CTI value 2
Text language
Published Oct. 8, 2020, 10 a.m.
Added to db Sept. 11, 2022, 12:44 p.m.
Last updated Nov. 19, 2024, 6:06 a.m.
Headline MontysThree: Industrial espionage with steganography and a Russian accent on both sides
Title MontysThree: Industrial espionage with steganography and a Russian accent on both sides
Detected Hints/Tags/Attributes 61/3/22
Source URLs
Redirection Url
Details Source https://securelist.com/montysthree-industrial-espionage/98972/
URL Provider
Details Provider Source level domain
Details securelist.com securelist.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
autosport-club.tekcities.com
Details Domain 1 
dl10-web-stock.ru
Details Domain 1 
dl16-web-eticket.ru
Details Domain 1 
dl166-web-eticket.ru
Details Domain 1 
dl55-web-yachtbooking.xyz
Details File 3 
2019.doc
Details File 1 
task.pdf
Details File 1 
invitro-106650152-1.pdf
Details File 1021 
rundll32.exe
Details File 1 
msgslang32.dll
Details File 33 
expand.exe
Details File 1 
pnagent.exe
Details md5 1 
da49fea229dd2dedab2b909f24fb24ab
Details md5 1 
1B0EE014DD2D29476DF31BA078A3FF48
Details md5 1 
0976C442A06D2D8A34E9B6D38D45AE42
Details md5 1 
A2AA414B30934893864A961B71F91D98
Details md5 1 
A221671ED8C3956E0B9AF2A5E04BDEE3
Details md5 1 
3A885062DAA36AE3227F16718A5B2BDB
Details md5 1 
3AFA43E1BC578460BE002EB58FA7C2DE
Details md5 1 
017539B3D744F7B6C62C94CE4BCA444F
Details md5 1 
501E91BA1CE1532D9790FCD1229CBBDA
Details md5 1 
D6FB78D16DFE73E6DD416483A32E1D72