SafeBreach Coverage for US-CERT Alert (AA22-320A) – Iranian State-Sponsored APT Actors
Tags
attack-pattern: Credentials - T1589.001 Lsass Memory - T1003.001 Malware - T1587.001 Malware - T1588.001 Pass The Hash - T1550.002 Powershell - T1059.001 Rundll32 - T1218.011 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Account Manipulation - T1098 Brute Force - T1110 Connection Proxy - T1090 Create Account - T1136 Credential Dumping - T1003 Graphical User Interface - T1061 Pass The Hash - T1075 Powershell - T1086 Rundll32 - T1085 Scheduled Task - T1053 Graphical User Interface
Show in Graph
Common Information
Type Value
UUID dca8294b-aae0-40fa-918b-32087357b23a
Fingerprint 9da7bf4dad7f4699
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 17, 2022, 3:06 p.m.
Added to db Nov. 17, 2022, 10:36 p.m.
Last updated Nov. 17, 2024, 6:53 p.m.
Headline SafeBreach Coverage for US-CERT Alert (AA22-320A) – Iranian State-Sponsored APT Actors
Title SafeBreach Coverage for US-CERT Alert (AA22-320A) – Iranian State-Sponsored APT Actors
Detected Hints/Tags/Attributes 61/1/4
Source URLs
Redirection Url
Details Source https://securityboulevard.com/2022/11/safebreach-coverage-for-us-cert-alert-aa22-320a-iranian-state-sponsored-apt-actors/
URL Provider
Details Provider Source level domain
Details securityboulevard.com securityboulevard.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 162 ✔ — https://media.cert.europa.eu/rss?type=category&id=APTFilter&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 397 
cve-2021-44228
Details File 72 
www.safe
Details IPv4 6 
182.54.217.2
Details Url 1 
https://www.safebreach.com/resources/blog/safebreach-coverage-for-us-cert-alert-aa22-320a-iranian-state-sponsored-apt-actors