DeadRinger Operation
Tags
country: China
attack-pattern: Data Credentials - T1589.001 Dll Side-Loading - T1574.002 Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Server - T1583.004 Server - T1584.004 Web Shell - T1505.003 Tool - T1588.002 Vulnerabilities - T1588.006 Dll Side-Loading - T1073 Web Shell - T1100
Show in Graph
Common Information
Type Value
UUID f34e283e-d0a3-42c5-beef-725e9c2ad691
Fingerprint 35b7801197b594ac
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 12, 2024, midnight
Added to db Aug. 31, 2024, 5 a.m.
Last updated Nov. 17, 2024, 6:49 p.m.
Headline DeadRinger Operation
Title DeadRinger Operation
Detected Hints/Tags/Attributes 56/2/5
Source URLs
Redirection Url
Details Source https://intel471.com/blog/deadringer-operation
URL Provider
Details Provider Source level domain
Details intel471.com intel471.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 138 ✔ Intel471 https://intel471.com/blog/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 47 
microsoft.exchange
Details File 351 
recycle.bin
Details File 2 
nvsmarex.exe
Details File 6 
chrome_frame_helper.exe
Details File 6 
event.dll