Dissecting TriangleDB, a Triangulation spyware implant
Tags
attack-pattern: Data Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Keychain - T1634.001 Keychain - T1555.001 Keychain - T1579 Server - T1583.004 Server - T1584.004 Keychain - T1142
Show in Graph
Common Information
Type Value
UUID dd286355-fa9c-4290-a277-29992bf571f7
Fingerprint b409bdddb163bf99
Analysis status DONE
Considered CTI value 2
Text language
Published June 21, 2023, 10 a.m.
Added to db June 21, 2023, 12:01 p.m.
Last updated Sept. 4, 2024, noon
Headline Dissecting TriangleDB, a Triangulation spyware implant
Title Dissecting TriangleDB, a Triangulation spyware implant
Detected Hints/Tags/Attributes 42/1/4
Source URLs
Redirection Url
Details Source https://securelist.com/triangledb-triangulation-implant/110050/
URL Provider
Details Provider Source level domain
Details securelist.com securelist.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 223 ✔ Securelist https://securelist.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 3 
keychain-2.db
Details md5 3 
063db86f015fe99fdd821b251f14446d
Details sha1 3 
1a321b77be6a523ddde4661a5725043aba0f037f
Details sha256 4 
fd9e97cfb55f9cfb5d3e1388f712edd952d902f23a583826ebe55e9e322f730f