First Binder Exploit Linked to SideWinder APT Group
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Exploits - T1587.004 Exploits - T1588.005 Inter-Process Communication - T1559 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID f6245323-47f3-40f4-920c-ed13730b82f9
Fingerprint ac350dc3d8b22b83
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 6, 2020, midnight
Added to db Sept. 26, 2022, 9:33 a.m.
Last updated Oct. 15, 2024, 11:55 p.m.
Headline First Binder Exploit Linked to SideWinder APT Group
Title First Binder Exploit Linked to SideWinder APT Group
Detected Hints/Tags/Attributes 47/2/17
Source URLs
Redirection Url
Details Source https://blog.trendmicro.com/trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group/
URL Provider
Details Provider Source level domain
Details trendmicro.com blog.trendmicro.com
Attributes
Details Type #Events CTI Value
Details CVE 28 
cve-2019-2215
Details Domain 1 
com.callcam.android
Details Domain 1 
com.camero.android
Details Domain 2 
ms-ethics.net
Details Domain 2 
deb-cn.net
Details Domain 4 
ap1-acl.net
Details Domain 1 
s-db.net
Details Domain 2 
aws-check.net
Details Domain 4 
reawk.net
Details sha256 1 
ec4d6bf06dd3f94f4555d75c6daaf540dee15b18d62cc004e774e996c703cb34
Details sha256 1 
a60fc4e5328dc75dad238d46a2867ef7207b8c6fb73e8bd001b323b16f02ba00
Details sha256 1 
0daefb3d05e4455b590da122255121079e83d48763509b0688e0079ab5d48886
Details sha256 1 
441d98dff3919ed24af7699be658d06ae8dfd6a12e4129a385754e6218bc24fa
Details sha256 1 
ac82f7e4831907972465477eebafc5a488c6bb4d460575cd3889226c390ef8d5
Details sha256 1 
ee679afb897213a3fd09be43806a7e5263563e86ad255fd500562918205226b8
Details sha256 1 
135cb239966835fefbb346165b140f584848c00c4b6a724ce122de7d999a3251
Details sha256 1 
a265c32ed1ad47370d56cbd287066896d6a0c46c80a0d9573d2bb915d198ae42