Rewterz Threat Alert – APT SideWinder Group Targeting Pakistan – Active IOCs - Rewterz
Tags
| country: | Afghanistan China Nepal Pakistan |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Botnet - T1583.005 Botnet - T1584.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Vulnerabilities - T1588.006 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | ff2749fb-5282-47d1-933c-9ef87adcf290 |
| Fingerprint | a3a0e5d39ad5cf4c |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Dec. 23, 2022, 1:02 p.m. |
| Added to db | Dec. 19, 2024, 6:55 a.m. |
| Last updated | Dec. 20, 2024, 1:03 a.m. |
| Headline | Rewterz Threat Alert – APT SideWinder Group Targeting Pakistan – Active IOCs |
| Title | Rewterz Threat Alert – APT SideWinder Group Targeting Pakistan – Active IOCs - Rewterz |
| Detected Hints/Tags/Attributes | 32/3/11 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | mailmofa.alit.info |
|
| Details | Domain | 1 | maildefence.alit.info |
|
| Details | Domain | 1 | foodies.alit.info |
|
| Details | Domain | 1 | mail.alit.info |
|
| Details | Domain | 1 | alit.info |
|
| Details | File | 2 | alit.inf |
|
| Details | md5 | 1 | 6484a83a2c7ac173cad630d871ba8f63 |
|
| Details | sha1 | 1 | fcd7a0ac708347a3ea2089bdf150fb9b095c5e81 |
|
| Details | sha256 | 1 | a2faee1e5fe8717d6360458f1fd6d83902a2c9c6bb2e84f9ea5e4b67ffafbebd |
|
| Details | Threat Actor Identifier - APT-C | 37 | APT-C-17 |
|
| Details | Threat Actor Identifier by Tencent | 48 | T-APT-04 |