EyePyramid: An Archaeological Journey
Tags
country: Italy
attack-pattern: Data Control Panel - T1218.002 Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Email Addresses - T1589.002 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Windows Management Instrumentation - T1047
Show in Graph
Common Information
Type Value
UUID fe58bc49-174f-4f36-b9c5-55cfb61438c5
Fingerprint b63458b10db58e8d
Analysis status DONE
Considered CTI value 0
Text language
Published Jan. 30, 2017, 2:40 p.m.
Added to db Oct. 9, 2022, 4:11 p.m.
Last updated Nov. 17, 2024, 6:30 p.m.
Headline Vulnerability Information
Title EyePyramid: An Archaeological Journey
Detected Hints/Tags/Attributes 54/2/14
Source URLs
Redirection Url
Details Source http://blog.talosintel.com/2017/01/Eye-Pyramid.html
Details Source https://blog.talosintelligence.com/2017/01/Eye-Pyramid.html
URL Provider
Details Provider Source level domain
Details talosintel.com blog.talosintel.com
Details talosintelligence.com blog.talosintelligence.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
dateandtime.now
Details Domain 11 
libero.it
Details Domain 36 
malwr.com
Details Domain 454 
www.google.com
Details Domain 403 
securelist.com
Details File 1 
'cacls.exe
Details File 1 
'default.reg
Details File 1 
'ghk.exe
Details File 1 
'stkr.exe
Details File 1 
ordinanza-di-custodia-cautelare-occhionero.pdf
Details sha256 1 
0af665d7d81871474039f08d96ba067d5a0bd5a95088009ea7344d23a27ca824
Details Url 6 
https://www.google.com/search?q=
Details Url 1 
http://www.tribupress.it/_/wp-content/uploads/2017/01/ordinanza-di-custodia-cautelare-occhionero.pdf
Details Url 1 
https://securelist.com/blog/incidents/77098/the-eyepyramid-attacks