Meow, Meow Leaks, and the Chaos of Ransomware Attribution
Tags
country: Germany Nigeria Italy Japan United Kingdom United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Models Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Local Account - T1087.001 Local Account - T1136.001 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Phishing - T1660 Phishing - T1566 Python - T1059.006 Software - T1592.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID f5617791-4f60-409c-accd-7b1a36b631e1
Fingerprint a44b18988bb48eeb
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 27, 2024, midnight
Added to db Oct. 1, 2024, 5:18 p.m.
Last updated Nov. 15, 2024, 12:52 a.m.
Headline Meow, Meow Leaks, and the Chaos of Ransomware Attribution
Title Meow, Meow Leaks, and the Chaos of Ransomware Attribution
Detected Hints/Tags/Attributes 101/3/15
Source URLs
Redirection Url
Details Source https://www.bitdefender.com/blog/businessinsights/meow-meow-leaks-and-the-chaos-of-ransomware-attribution/
URL Provider
Details Provider Source level domain
Details bitdefender.com www.bitdefender.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 278 ✔ Business Insights Cybersecurity Blog by Bitdefender https://www.bitdefender.com/blog/api/rss/businessinsights/enterprise-security/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 2 
meowleaks.org
Details File 26 
windows.exe
Details File 2 
powertool32.exe
Details File 4 
powertool64.exe
Details File 131 
spoolsv.exe
Details File 2 
truenight.sys
Details md5 3 
85147575c1a6f57d849747dfd8293e9a
Details sha256 4 
222e2b91f5becea8c7c05883e4a58796a1f68628fbb0852b533fed08d8e9b853
Details sha256 5 
7f6421cdf6355edfdcbddadd26bcdfbf984def301df3c6c03d71af8e30bb781f
Details sha256 3 
513c18df31e04137e97b90bdc36da10bf2cb1036f0911ab14ab46fc630149ca4
Details sha256 4 
fe311979cd099677b1fd7c5b2008aed000f0e38d58eb3bfd30d04444476416f9
Details sha256 4 
7f624cfb74685effcb325206b428db2be8ac6cce7b72b3edebbe8e310a645099
Details sha256 4 
5a936250411bf5709a888db54680c131e9c0f40ff4ff04db4aeda5443481922f
Details sha256 5 
b5b105751a2bf965a6b78eeff100fe4c75282ad6f37f98b9adcd15d8c64283ec
Details IPv4 3 
95.164.69.179