FinFisher Filleted 🐟
Tags
country: Egypt Bahrain Ethiopia Germany
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Code Signing - T1553.002 Exploits - T1587.004 Exploits - T1588.005 Launch Agent - T1543.001 Launchctl - T1569.001 Launchd - T1053.004 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Vulnerabilities - T1588.006 Code Signing - T1116 Launch Agent - T1159 Launchctl - T1152 Rootkit - T1014 Sudo - T1169 Rootkit
Show in Graph
Common Information
Type Value
UUID ecfd5f73-b628-41fb-bfd1-bcb21762bc89
Fingerprint ad60988f34f78471
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 26, 2020, midnight
Added to db Nov. 6, 2023, 6:27 p.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline UNKNOWN
Title FinFisher Filleted 🐟
Detected Hints/Tags/Attributes 83/3/35
Source URLs
Redirection Url
Details Redirection https://objective-see.com/blog/blog_0x4F.html
Details Source https://objective-see.org/blog/blog_0x4F.html
URL Provider
Details Provider Source level domain
Details objective-see.com objective-see.com
Details objective-see.org objective-see.org
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 186 ✔ Objective-See's Blog https://objective-see.org/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 2 
cve-2015-5889
Details Domain 45 
mastodon.social
Details Domain 111 
www.apple.com
Details Domain 359 
com.apple
Details Domain 2 
ara0848.app
Details Domain 20 
processmonitor.app
Details Domain 1 
80.bundle.zip
Details Domain 2 
arch.zip
Details Domain 21 
filemonitor.app
Details Domain 132 
www.exploit-db.com
Details Domain 4128 
github.com
Details Email 2 
botherder@mastodon.social
Details File 2 
caglayan-macos.dmg
Details File 130 
info.pl
Details File 1 
bundle.zip
Details File 2 
arch.zip
Details File 3 
org.log
Details File 3 
logind.pl
Details File 26 
os.exe
Details File 1 
43os.sys
Details File 3 
logind.ps
Details File 2 
aac.dat
Details Github username 1 
kpwn
Details sha1 1 
59180391de409c83bef642ad1bca2999ab5fe328
Details sha1 1 
2584f1119c65ffd0936e2916b285389404b942c9
Details sha1 1 
72cb14bc737a9d77c040affa60521686ffa80b84
Details sha1 1 
9a0ede8fad59e7252502881554be0c21972238c9
Details sha1 1 
427a1c1daf9030069f0c771ce172c104513a7722
Details sha1 1 
a65965b960b3d322bbae467f51bf215d574b00cc
Details sha1 1 
62e5dc40bfabaa712cd9e32ac755384db07f0dab
Details sha1 1 
18e1d03e41b5fc6d54fdda340fe2dab219502f3d
Details sha1 1 
a2aba86d5d763f311dff8250bc8fe98de958bff4
Details Url 73 
http://www.apple.com/dtds/propertylist-1.0.dtd
Details Url 1 
https://www.exploit-db.com/exploits/36739.
Details Url 1 
https://github.com/kpwn/tpwn.