Threat Intelligence Report 12th November - 18th November
Tags
country: Argentina Australia Belgium Brazil Canada Switzerland Germany India Israel Italy South Korea Spain Sweden Mexico Poland Romania United Kingdom United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Data Encrypted For Impact - T1486 Malware - T1587.001 Malware - T1588.001 System Information Discovery - T1426 Phishing - T1660 Phishing - T1566 Remote Desktop Protocol - T1021.001 Server - T1583.004 Server - T1584.004 Service Execution - T1569.002 Software - T1592.002 System Services - T1569 Windows Service - T1543.003 Vulnerabilities - T1588.006 Query Registry - T1012 Remote Desktop Protocol - T1076 Service Execution - T1035 System Information Discovery - T1082
Show in Graph
Common Information
Type Value
UUID e7fe8447-d8e1-4176-8efb-6d7d774270c9
Fingerprint b7300851ed3dae83
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 18, 2024, midnight
Added to db Nov. 18, 2024, 10:33 a.m.
Last updated Dec. 23, 2024, 10:18 a.m.
Headline Threat Intelligence Report November 12 - November 18 2024
Title Threat Intelligence Report 12th November - 18th November
Detected Hints/Tags/Attributes 120/3/23
Source URLs
Redirection Url
Details Source https://redpiranha.net/news/threat-intelligence-report-november-12-november-18-2024
URL Provider
Details Provider Source level domain
Details redpiranha.net redpiranha.net
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 482 ✔ Red Piranha https://redpiranha.net/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CERT Ukraine 9 
UAC-0125
Details CVE 20 
cve-2024-8069
Details File 317 
services.exe
Details File 1 
9a47ab27d50df1faba1dc5777bdcfff576524424bc4a3364d33267bbcf8a3896.exe
Details File 135 
sc.exe
Details sha256 1 
9a47ab27d50df1faba1dc5777bdcfff576524424bc4a3364d33267bbcf8a3896
Details sha256 1 
c38894a347095ccac80a11ce3fa03dc6a10d8d3f939a3c8ff9ca2340c16da5db
Details sha256 1 
059d424c7f811cd91a76a9e7e3b54d9129fb9eb3404cf1fb768b587612ebef80
Details sha256 1 
a54b321d99b84ee47aca5f4084d8b7d01c414d640d344ce3cd7bbec1828b6047
Details sha256 1 
0f8309a44692543eaaf98c2f1e45215afac1fd05694527c263525e3be36d51aa
Details sha256 1 
1333852d77f48fb5edda44045fd571e8643a09f383d4282d949d42f222a34d22
Details sha256 1 
7a7bfe127419497d909609d4f50616415fb605330437b8f539507497db03dcae
Details sha256 1 
6b7ca04c7543d92da3646555d56202b2dacf626856d3728b8a4a7b0d48a4c7d9
Details sha256 1 
b586168b8703163aafa0223ed5baf4e0dd6974690c0ea77d661f682fc489585e
Details sha256 1 
0e1f9c6b582510ced9da548e8a2ae8b56244529983da11a4204263367e372d48
Details IPv4 1 
20.189.173.16
Details MITRE ATT&CK Techniques 82 
T1569
Details MITRE ATT&CK Techniques 186 
T1569.002
Details MITRE ATT&CK Techniques 520 
T1012
Details MITRE ATT&CK Techniques 1062 
T1082
Details MITRE ATT&CK Techniques 521 
T1486
Details Threat Actor Identifier - APT 54 
APT73
Details Url 1 
https://forum.redpiranha.net/t/known-exploited-vulnerabilities-catalog-2nd-week-of-november-2024/525