Rewterz Threat Alert – PatchWork APT Targets Victims in South Asia - Rewterz
Tags
| country: | China Pakistan |
| attack-pattern: | Malware - T1587.001 Malware - T1588.001 Software - T1592.002 |
Common Information
| Type | Value |
|---|---|
| UUID | f815d82f-43ee-4961-ae1b-f0f0c93ad41f |
| Fingerprint | 22b28a452f57e71e |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | July 20, 2020, 6:05 p.m. |
| Added to db | Dec. 18, 2024, 10:49 p.m. |
| Last updated | Dec. 19, 2024, 8:31 a.m. |
| Headline | Rewterz Threat Alert – PatchWork APT Targets Victims in South Asia |
| Title | Rewterz Threat Alert – PatchWork APT Targets Victims in South Asia - Rewterz |
| Detected Hints/Tags/Attributes | 35/2/23 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 3 | cve-2020-4527 |
|
| Details | Domain | 1 | altered.twilightparadox.com |
|
| Details | File | 1 | covid19_guidelines.docx |
|
| Details | md5 | 2 | 16c01b13998e96f27bd9e3aa795da875 |
|
| Details | md5 | 1 | ae625c151814fcb5cd4f48329285665b |
|
| Details | md5 | 2 | 4c79583d189207ec9f138204fbb63810 |
|
| Details | md5 | 2 | 809ff867d2cfe803ef4ae4102283b45c |
|
| Details | md5 | 1 | 6423fd4c8be66e6adf95f62821b9b93c |
|
| Details | md5 | 2 | f85a94ef1e9c0dca48dbecb5c8399e07 |
|
| Details | sha1 | 2 | 0aa66138590ab69ac68711a6a50a56da537a3646 |
|
| Details | sha1 | 1 | f83ead889dc28c0a38e86d22c0447b17a8eaf486 |
|
| Details | sha1 | 2 | 3956b3ab9d278a9662085fd5b55095849979ce11 |
|
| Details | sha1 | 2 | 734807ef7b402219ab1badb5d5c1804639a465f9 |
|
| Details | sha1 | 1 | 41eee91cb9b34d98090300a7520c42526055aa13 |
|
| Details | sha1 | 1 | d7d1ee7455859901c28e0f2a991e71f9524f5af1 |
|
| Details | sha256 | 2 | 2ba13a3e540229677456d1e320f682bed8e6733bf6547b89a496b8d020eea698 |
|
| Details | sha256 | 1 | 977c81bfab432eaeb119167b5342468918645636aa3dc94bdb993667c2e96693 |
|
| Details | sha256 | 1 | 66f56f29d4c23b2e79dccd3b215be7a1a352989162d48788bedc56f7ab6c7f58 |
|
| Details | sha256 | 1 | c23b098a627d1c8449fad6756007c3b2a7ae20c3e70c74bbe4154c8b1651c84e |
|
| Details | sha256 | 2 | 21ee9bb5f2444fdf72d55109b7f823d5a5cd43d60aa1fb653764e2e5d20f2080 |
|
| Details | sha256 | 2 | dfe18346db405af2484064e80b5c0124bc80ca84d39b90e1aa5d5592c479a904 |
|
| Details | IPv4 | 1 | 185.157.78.135 |
|
| Details | Url | 1 | http://185.157.78.135 |