5 Malware Variants You Should Know - ReliaQuest
Tags
cmtmf-attack-pattern: Process Injection
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Code Signing - T1553.002 Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Javascript - T1059.007 Kerberoasting - T1558.003 Keylogging - T1056.001 Keylogging - T1417.001 Malicious File - T1204.002 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Process Injection - T1631 Python - T1059.006 Remote Access Software - T1663 Rundll32 - T1218.011 Scheduled Task - T1053.005 Software - T1592.002 Visual Basic - T1059.005 Code Signing - T1116 Kerberoasting - T1208 Powershell - T1086 Process Injection - T1055 Remote Access Tools - T1219 Rundll32 - T1085 Scheduled Task - T1053 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID ddf03d3c-ade4-4819-8023-1ab8035c7acb
Fingerprint c43408d99977b2cd
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 15, 2024, 8 a.m.
Added to db Aug. 31, 2024, 10:01 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline 5 Malware Variants You Should Know
Title 5 Malware Variants You Should Know - ReliaQuest
Detected Hints/Tags/Attributes 135/4/22
Source URLs
Redirection Url
Details Source https://www.reliaquest.com/blog/5-malware-variants-you-should-know/
URL Provider
Details Provider Source level domain
Details reliaquest.com www.reliaquest.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 362 ✔ Blog – ReliaQuest https://www.reliaquest.com/blog/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
malwarebytes.pro
Details Domain 1 
slationo.com
Details Domain 1 
shothix.com
Details Domain 1 
string.rs
Details Domain 1 
function.rs
Details Domain 2 
micrsoft-teams-download.com
Details Domain 2 
prodfindfeatures.com
Details Domain 3 
supfoundrysettlers.us
Details File 1 
downloadsetup.exe
Details File 8 
bypass.ps1
Details File 22 
update.js
Details File 1 
shabab.exe
Details File 2 
msteamssetup_c_l_.exe
Details File 3 
cleanup30.dll
Details File 1 
getresult.exe
Details File 1 
krb.ps1
Details File 1 
green.exe
Details File 3 
gtx.exe
Details File 62 
whoami.exe
Details File 49 
nltest.exe
Details File 56 
tasklist.exe
Details IPv4 1 
195.85.114.193