A Malicious Sight in Google Sites
Tags
country: Brazil Portugal
maec-delivery-vectors: Watering Hole
attack-pattern: Data Clipboard Data - T1414 Cloud Accounts - T1078.004 Cloud Accounts - T1585.003 Cloud Accounts - T1586.003 Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Email Account - T1087.003 Email Accounts - T1585.002 Email Accounts - T1586.002 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Whois - T1596.002 Clipboard Data - T1115
Show in Graph
Common Information
Type Value
UUID f5d75d07-800c-41e7-ba9b-7ec31627d948
Fingerprint 94262fdb89ba02a9
Analysis status DONE
Considered CTI value 0
Text language
Published April 23, 2019, 4 p.m.
Added to db Jan. 18, 2023, 11:31 p.m.
Last updated Nov. 9, 2024, 11:08 a.m.
Headline A Malicious Sight in Google Sites
Title A Malicious Sight in Google Sites
Detected Hints/Tags/Attributes 49/3/20
Source URLs
Redirection Url
Details Source https://www.netskope.com/blog/malicious-google-sites
URL Provider
Details Provider Source level domain
Details netskope.com www.netskope.com
Attributes
Details Type #Events CTI Value
Details Domain 43 
sites.google.com
Details Domain 1 
kinghost.net
Details Domain 1 
drivemailcompartilhamentoanexos.kinghost.net
Details Domain 1 
zzz.com.ua
Details Domain 1 
www.albumdepremios.com.br
Details Domain 1 
albumdepremios.com.br
Details Domain 1 
albumpremios.com.br
Details File 1 
reserva-manoel_pdf.rar
Details File 95 
pdf.exe
Details File 1 
libmysql50.dll
Details File 1 
otlook.exe
Details File 1 
cliente.dll
Details File 1 
c:\clientpc\capctrl.txt
Details File 1 
c:\clientpc\relatorio.log
Details File 1 
dblog.log
Details File 1 
cliente.cfg
Details File 1 
filtro.cfg
Details Url 1 
https://sites.google.com/site/detailsreservations/reserva-manoel_pdf.rar?attredirects=0&d=1
Details Url 1 
http://www.albumdepremios.com.br/hostmeu
Details Url 1 
http://www.albumdepremios.com.br/heisen