Anomali Suspects that China-Backed APT Pirate Panda May Be Seeking Access to Vietnam Government Data Center
Tags
country: China Vietnam United States Of America U.S. Virgin Islands
maec-delivery-vectors: Watering Hole
attack-pattern: Data Dll Side-Loading - T1574.002 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Email Account - T1087.003 Email Addresses - T1589.002 Employee Names - T1589.003 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Dll Side-Loading - T1073
Show in Graph
Common Information
Type Value
UUID e93b0308-f76c-40d8-86bd-92de4af5b0b8
Fingerprint e83d4ddf1697338d
Analysis status DONE
Considered CTI value 2
Text language
Published April 30, 2020, midnight
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Nov. 17, 2024, 5:54 p.m.
Headline Anomali Suspects that China-Backed APT Pirate Panda May Be Seeking Access to Vietnam Government Data Center
Title Anomali Suspects that China-Backed APT Pirate Panda May Be Seeking Access to Vietnam Government Data Center
Detected Hints/Tags/Attributes 76/3/31
Source URLs
Redirection Url
Details Source https://www.anomali.com/blog/anomali-suspects-that-china-backed-apt-pirate-panda-may-be-seeking-access-to-vietnam-government-data-center
URL Provider
Details Provider Source level domain
Details anomali.com www.anomali.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
danang.gov.vn
Details Domain 1 
dsp.vn
Details Domain 24 
dns.google
Details Domain 1 
skypechatvideo.online
Details Domain 1 
onlinedocumentviewer.us
Details Domain 17 
www.anomali.com
Details Domain 403 
securelist.com
Details Domain 1 
www.a12d404.net
Details File 1 
1_5.eml
Details File 30 
utilman.exe
Details File 41 
mpsvc.dll
Details File 198 
msmpeng.exe
Details File 2 
title.php
Details File 1 
side-loading-fun-4.html
Details sha256 1 
cd075ddb7cbe9bfb9ca955be605a6f622d83bcef7eded2b495c653e86fe9b59e
Details sha256 1 
9736c6230909c71a6010d6005a86ffd60f5b9cfa2fdeae2a78084ffe48dc01dc
Details sha256 1 
80c3e22b640b47e0c41f4185f091e2c523a9ef291a75b7007303e2267b8d68c5
Details sha256 1 
a369fee3b83c2d2534c48fdfac8d03a266809aaa28ace6b6002eab57cc14edd1
Details IPv4 1 
10.196.132.154
Details IPv4 295 
8.8.8.8
Details IPv4 63 
8.8.4.4
Details IPv4 1 
185.244.150.4
Details Url 1 
http://skypechatvideo.online/wwwlib/title.php?id=nzherjjfqjgtndk5rc03odq0ltlcnzctm0u2quvbreyyneu4:u1q=
Details Url 2 
https://www.anomali.com/products.
Details Url 1 
https://www.scribd.com/document/451284814/crowdstrike-ongoing-pirate-panda-operations-using-current-event-themes.
Details Url 1 
https://www.scmp.com/news/china/diplomacy/article/3081970/chinese-military-lashes-out-american-warships-intrusion-south.
Details Url 2 
https://securelist.com/luckymouse-hits-national-data-center/86083/.
Details Url 1 
https://dsp.vn/chi_tiet-6420.
Details Url 1 
https://vn.usembassy.gov/theodore-roosevelt-strike-group-completes-port-visit-to-da-nang-to-commemorate-25-years-of-diplomatic-relations/.
Details Url 1 
https://www.worldpoliticsreview.com/trend-lines/28669/could-china-s-aggression-in-the-south-china-sea-boost-u-s-vietnam-relations.
Details Url 1 
https://www.a12d404.net/security/2019/01/04/side-loading-fun-4.html