HIDDEN COBRA – Joanap Backdoor Trojan and Brambul Server Message Block Worm | CISA
Tags
country: Egypt Argentina Belgium Brazil Cambodia China Colombia Sri Lanka Jordan India Iran Pakistan Saudi Arabia Spain Sweden Tunisia Taiwan United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Email Addresses - T1589.002 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID f78e9146-f6b4-4134-9d49-7b5b5469cda6
Fingerprint ada61d878871a3cb
Analysis status DONE
Considered CTI value 0
Text language
Published May 29, 2018, midnight
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 17, 2024, 5:55 p.m.
Headline Alert (TA18-149A)
Title HIDDEN COBRA – Joanap Backdoor Trojan and Brambul Server Message Block Worm | CISA
Detected Hints/Tags/Attributes 77/3/7
Source URLs
Redirection Url
Details Source https://www.us-cert.gov/ncas/alerts/TA18-149A
URL Provider
Details Provider Source level domain
Details us-cert.gov www.us-cert.gov
Attributes
Details Type #Events CTI Value
Details Domain 145 
www.us-cert.gov
Details Domain 1 
mssscardprv.ax
Details Domain 10 
hq.dhs.gov
Details Domain 56 
fbi.gov
Details Email 7 
ncciccustomerservice@hq.dhs.gov
Details Email 29 
cywatch@fbi.gov
Details Url 21 
https://www.us-cert.gov/hiddencobra.