Earth Simnavaz (APT34) APT IOCs - SEC-1275-1
Tags
| attack-pattern: | Powershell - T1059.001 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | dde3d2be-4529-4f25-85f4-bef28172845e |
| Fingerprint | 260cea26d217d84b |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Oct. 14, 2024, midnight |
| Added to db | Oct. 14, 2024, 8:13 a.m. |
| Last updated | Nov. 13, 2024, 7:21 p.m. |
| Headline | Earth Simnavaz (APT34) APT IOCs |
| Title | Earth Simnavaz (APT34) APT IOCs - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 7/1/20 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://1275.ru/ioc/4102/earth-simnavaz-apt34-apt-iocs/?mtm_campaign=rss |
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 45 | cve-2024-30088 |
|
| Details | File | 4 | u.ps1 |
|
| Details | sha256 | 3 | 1169d8fe861054d99b10f7a3c87e3bbbd941e585ce932e9e543a2efd701deac2 |
|
| Details | sha256 | 3 | 1d2ff65ac590c8d0dec581f6b6efbf411a2ce5927419da31d50156d8f1e3a4ff |
|
| Details | sha256 | 3 | 27a0e31ae16cbc6129b4321d25515b9435c35cc2fa1fc748c6f109275bee3d6c |
|
| Details | sha256 | 3 | 43c83976d9b6d19c63aef8715f7929557e93102ff0271b3539ccf2ef485a01a7 |
|
| Details | sha256 | 3 | 54e8fbae0aa7a279aaedb6d8eec0f95971397fea7fcee6c143772c8ee6e6b498 |
|
| Details | sha256 | 3 | 6d8bdd3e087b266d493074569a85e1173246d1d71ee88eca94266b5802e28112 |
|
| Details | sha256 | 3 | 6e4f237ef084e400b43bc18860d9c781c851012652b558f57527cf61bee1e1ef |
|
| Details | sha256 | 5 | 7ebbeb2a25da1b09a98e1a373c78486ed2c5a7f2a16eec63e576c99efe0c7a49 |
|
| Details | sha256 | 3 | 98fb12a9625d600535df342551d30b27ed216fed14d9c6f63e8bf677cb730301 |
|
| Details | sha256 | 3 | a24303234e0cc6f403fca8943e7170c90b69976015b6a84d64a9667810023ed7 |
|
| Details | sha256 | 3 | abfc8e9b4b02e196af83608d5aaef1771354b32c898852dff532bd8cfd2ce59d |
|
| Details | sha256 | 3 | af979580849cc4619b815551842f3265b06497972c61369798135145b82f3cd8 |
|
| Details | sha256 | 3 | b3257f0c0ef298363f89c7a61ab27a706e9e308c22f1820dc4f02dfa0f68d897 |
|
| Details | sha256 | 3 | c0189edde8fa030ff4a70492ced24e325847b04dba33821cf637219d0ddff3c9 |
|
| Details | sha256 | 3 | ca98a24507d62afdb65e7ad7205dfe8cd9ef7d837126a3dfc95a74af873b1dc5 |
|
| Details | sha256 | 3 | db79c39bc06e55a52741a9170d8007fa93ac712df506632d624a651345d33f91 |
|
| Details | sha256 | 3 | edfae1a69522f87b12c6dac3225d930e4848832e3c551ee1e7d31736bf4525ef |
|
| Details | Threat Actor Identifier - APT | 258 | APT34 |