Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Intel]: https://github.com/fboldewin/FastCashMalwareDissected/raw/master/Operation%20Fast%20Cash%20-%20Hidden%20Cobra%E2%80%98s%20AIX%20PowerPC%20malware%20dissected.pdf #312

Open
timb-machine opened this issue Apr 20, 2022 · 0 comments

Comments

@timb-machine
Copy link
Owner

timb-machine commented Apr 20, 2022

Area

Malware reports

Parent threat

Persistence, Impact, Defense Evasion, Privilege Escalation

Finding

https://github.com/fboldewin/FastCashMalwareDissected/raw/master/Operation%20Fast%20Cash%20-%20Hidden%20Cobra%E2%80%98s%20AIX%20PowerPC%20malware%20dissected.pdf

Industry reference

attack:T1565.002:Transmitted Data Manipulation
attack:T1055:Process Injection
attack:T1055.009:Proc Memory
attack:T1564.001:Hidden Files and Directories
attack:T1574:Hijack Execution Flow
attack:T1567:Financial Theft

Malware reference

#135
FastCash

Actor reference

Hidden Cobra

Component

AIX
Banking

Scenario

No response

@timb-machine timb-machine self-assigned this Jun 11, 2022
@timb-machine timb-machine changed the title [Intel]: https://github.com/fboldewin/FastCashMalwareDissected/blob/master/Operation%20Fast%20Cash%20-%20Hidden%20Cobra%E2%80%98s%20AIX%20PowerPC%20malware%20dissected.pdf [Intel]: https://github.com/fboldewin/FastCashMalwareDissected/raw/master/Operation%20Fast%20Cash%20-%20Hidden%20Cobra%E2%80%98s%20AIX%20PowerPC%20malware%20dissected.pdf Apr 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment