Create Malware analysis 26-08-19.md
This commit is contained in:
parent
c652dc87fa
commit
748573da97
48
Israel/APT/Unknown/26-08-19/Malware analysis 26-08-19.md
Normal file
48
Israel/APT/Unknown/26-08-19/Malware analysis 26-08-19.md
Normal file
@ -0,0 +1,48 @@
|
|||||||
|
# Malware analysis about unknown Israel APT campaign
|
||||||
|
## Table of Contents
|
||||||
|
* [Malware analysis](#Malware-analysis)
|
||||||
|
+ [Initial vector](#Initial-vector)
|
||||||
|
* [Cyber Threat Intel](#Cyber-Threat-Intel)
|
||||||
|
* [Indicators Of Compromise (IOC)](#IOC)
|
||||||
|
* [References MITRE ATT&CK Matrix](#Ref-MITRE-ATTACK)
|
||||||
|
* [Links](#Links)
|
||||||
|
+ [Original Tweet](#Original-Tweet)
|
||||||
|
+ [Link Anyrun](#Links-Anyrun)
|
||||||
|
+ [Documents](#Documents)
|
||||||
|
|
||||||
|
## Malware analysis <a name="Malware-analysis"></a>
|
||||||
|
### Initial vector <a name="Initial-vector"></a>
|
||||||
|
###### The initial
|
||||||
|
![alt text](link "")
|
||||||
|
|
||||||
|
### Cyber kill chain <a name="Cyber-kill-chain"></a>
|
||||||
|
###### The process graph resume the cyber kill chain used by the attacker.
|
||||||
|
![alt text]()
|
||||||
|
### Cyber Threat Intel <a name="Cyber-Threat-Intel"></a>
|
||||||
|
## References MITRE ATT&CK Matrix <a name="Ref-MITRE-ATTACK"></a>
|
||||||
|
###### List of all the references with MITRE ATT&CK Matrix
|
||||||
|
|
||||||
|
|Enterprise tactics|Technics used|Ref URL|
|
||||||
|
| :---------------: |:-------------| :------------- |
|
||||||
|
||||
|
||||||
|
||||
|
||||||
|
||||
|
||||||
|
|
||||||
|
## Indicators Of Compromise (IOC) <a name="IOC"></a>
|
||||||
|
|
||||||
|
###### List of all the Indicators Of Compromise (IOC)
|
||||||
|
|
||||||
|
| Indicator | Description|
|
||||||
|
| ------------- |:-------------:|
|
||||||
|
|||
|
||||||
|
||Domain requested|
|
||||||
|
||IP requested|
|
||||||
|
||HTTP/HTTPS requests||
|
||||||
|
||IP C2|
|
||||||
|
||Domain C2|
|
||||||
|
## Links <a name="Links"></a>
|
||||||
|
###### Original tweet: [https://twitter.com/Timele9527/status/1166188375109296128](https://twitter.com/Timele9527/status/1166188375109296128) <a name="Original-Tweet"></a>
|
||||||
|
###### Links Anyrun: <a name="Links-Anyrun"></a>
|
||||||
|
* [فضيحة جديدة لأحد قيادات حماس.zip (A new scandal of one of the leaders of Hamas.zip)](https://app.any.run/tasks/59ed8062-cf77-4d73-81bd-19cb26b7c7c6/)
|
||||||
|
###### Documents: <a name="Documents"></a>
|
||||||
|
* [link]()
|
Loading…
Reference in New Issue
Block a user