Bahamut, Confucius and Patchwork Connected to Urpage
Tags
country: Argentina
maec-delivery-vectors: Watering Hole
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Python - T1059.006 Server - T1583.004 Server - T1584.004 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID ef75e496-0112-4015-853d-f3e28e710644
Fingerprint a4143c118c764c81
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 29, 2018, midnight
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Oct. 15, 2024, 5:22 p.m.
Headline Bahamut, Confucius and Patchwork Connected to Urpage
Title Bahamut, Confucius and Patchwork Connected to Urpage
Detected Hints/Tags/Attributes 67/3/11
Source URLs
Redirection Url
Details Source https://blog.trendmicro.com/trendlabs-security-intelligence/the-urpage-connection-to-bahamut-confucius-and-patchwork/
Details Source https://www.trendmicro.com/en_ca/research/18/h/the-urpage-connection-to-bahamut-confucius-and-patchwork.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Details trendmicro.com blog.trendmicro.com
Attributes
Details Type #Events CTI Value
Details CVE 9 
cve-2017-8750
Details CVE 9 
cve-2017-12824
Details Domain 2 
pikrpro.eu
Details Domain 3 
ch.threema.app
Details Domain 3 
appswonder.info
Details Domain 4 
referfile.com
Details Domain 3 
twitck.com
Details Domain 1 
islamicfinderfeedback.pikrpro.eu
Details Domain 1 
memrifilesforinfo.pikpro.eu
Details sha256 2 
f1a54dca2fdfe59ec3f537148460364fb5d046c9b4e7db5fc819a9732ae0e063
Details sha256 2 
434d34c0502910c562f5c6840694737a2c82a8c44004fa58c7c457b08aac17bd