Exfiltration Tools - ReliaQuest
Tags
cmtmf-attack-pattern: Customer Churn Masquerading
country: Canada Germany
attack-pattern: Data Cloud Services - T1021.007 Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Email Accounts - T1585.002 Email Accounts - T1586.002 Masquerading - T1655 Match Legitimate Name Or Location - T1036.005 Match Legitimate Name Or Location - T1655.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Web Services - T1583.006 Web Services - T1584.006 Tool - T1588.002 Connection Proxy - T1090 Masquerading - T1036 Scripting - T1064 Masquerading Scripting
Show in Graph
Common Information
Type Value
UUID df9a10c2-f5e9-4610-bf69-5c5a51c0a9bb
Fingerprint 75f89cd95a37eda9
Analysis status DONE
Considered CTI value 1
Text language
Published Aug. 8, 2024, 8 a.m.
Added to db Aug. 31, 2024, 10:01 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Exfiltration Tools
Title Exfiltration Tools - ReliaQuest
Detected Hints/Tags/Attributes 105/3/7
Source URLs
Redirection Url
Details Source https://www.reliaquest.com/blog/exfiltration-tools/
URL Provider
Details Provider Source level domain
Details reliaquest.com www.reliaquest.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 362 ✔ Blog – ReliaQuest https://www.reliaquest.com/blog/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 32 
temp.sh
Details File 199 
firefox.exe
Details File 1 
windowsdebugfirefox.exe
Details File 37 
rclone.exe
Details File 96 
wallet.dat
Details File 1 
c:\windows\debug\firefox.exe
Details Threat Actor Identifier - APT 194 
APT35