Cyber Attackers Leverage Russia-Ukraine Conflict in Multiple Spam Campaigns
Tags
country: Lithuania Poland Russia Ukraine United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Impersonation - T1656 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566
Show in Graph
Common Information
Type Value
UUID e6bd983a-b061-4720-b0cb-8e19ab41a73c
Fingerprint 6ca5889b2923bf4d
Analysis status DONE
Considered CTI value 2
Text language
Published March 25, 2022, midnight
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Nov. 17, 2024, 5:55 p.m.
Headline SpiderLabs Blog
Title Cyber Attackers Leverage Russia-Ukraine Conflict in Multiple Spam Campaigns
Detected Hints/Tags/Attributes 62/3/8
Source URLs
Redirection Url
Details Source https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cyber-attackers-leverage-russia-ukraine-conflict-in-multiple-spam-campaigns
URL Provider
Details Provider Source level domain
Details trustwave.com www.trustwave.com
Attributes
Details Type #Events CTI Value
Details CVE 375 
cve-2017-11882
Details Domain 3 
ukraine.gov
Details File 2 
suct220002.xlsx
Details sha256 1 
4907309437e12932d437f8c3ae03fbfde7d4e196b6f1dc7f2d98e3a388ce585c
Details sha256 1 
faef8505886bc30e045f0eb3f1422528cdab1fedc8e02c601605b41bd205d348
Details sha256 1 
0a9babd846b1edf99e75f3c9de492c6341f9ca9a8e91851ad323bf8f325f9799
Details IPv4 2 
136.144.41.109
Details Url 1 
http://136.144.41.109/hre.exe