The Newest Variant of the Astaroth Trojan Evades Detection in the Sneakiest Way
Tags
country: Brazil
attack-pattern: Data Clipboard Data - T1414 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Rundll32 - T1218.011 Server - T1583.004 Server - T1584.004 Software - T1592.002 Xsl Script Processing - T1220 Clipboard Data - T1115 Rundll32 - T1085
Show in Graph
Common Information
Type Value
UUID fe96364a-3405-4af5-a0bb-4f22fdd7a30c
Fingerprint ed931b8f8b7487a7
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 13, 2019, midnight
Added to db Jan. 18, 2023, 11:01 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline The Newest Variant of the Astaroth Trojan Evades Detection in the Sneakiest Way
Title The Newest Variant of the Astaroth Trojan Evades Detection in the Sneakiest Way
Detected Hints/Tags/Attributes 50/2/4
Source URLs
Redirection Url
Details Source https://www.cybereason.com/blog/information-stealing-malware-targeting-brazil
URL Provider
Details Provider Source level domain
Details cybereason.com www.cybereason.com
Attributes
Details Type #Events CTI Value
Details File 8 
unins000.exe
Details File 240 
wmic.exe
Details File 3 
aswrundll.exe
Details File 1018 
rundll32.exe