← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Suspected APT29 Operation Launches Election Fraud Themed Phishing Campaigns
WHITE APT29 AlienVault 2021-05-27 Modified: 2021-07-02
226
IOCs
HIGH VOLUME
Volexity, a security firm, has identified and identified a phishing campaign targeting government agencies across the United States and Europe that is believed to be related to APT29.
cobaltstrikeapt29dark halolnk fileusaideuropemalwareNOBELIUM
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
CobaltStrike FreshFire
Indicators of Compromise (74 / 226 total)
All hostname FileHash-MD5 FileHash-SHA256 FileHash-SHA1 domain URL YARA
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 48b5fb3fa3ea67c2bc0086c41ec755c39d748a7100d71b81f618e82bf1c479f0 SHA256 of 1cb1c2cd9f59d4e83eb3c950473a772406ec6f1a 2021-05-27
FileHash-SHA256 7d34f25ad8099bd069c5a04799299f17d127a3866b77ee34ffb59cfd36e29673 SHA256 of 738c20a2cc825ae51b2a2f786248f850c8bab6f5 2021-05-27
FileHash-SHA256 94786066a64c0eb260a28a2959fcd31d63d175ade8b05ae682d3f6f9b2a5a916 SHA256 of bf7b36c521e52093360a4df0dd131703b7b3d648 2021-05-27
FileHash-SHA256 ad67aaa50fd60d02f1378b4155f69cffa9591eaeb80523489a2355512cc30e8c — 2021-05-27
FileHash-SHA256 b041efb8ba2a88a3d172f480efa098d72eef13e42af6aa5fb838e6ccab500a7c — 2021-05-27
FileHash-SHA256 ee42ddacbd202008bcc1312e548e1d9ac670dd3d86c999606a3a01d464a2a330 SHA256 of 1fb12e923bdb71a1f34e98576b780ab2840ba22e 2021-05-27
FileHash-SHA256 2523f94bd4fba4af76f4411fe61084a7e7d80dec163c9ccba9226c80b8b31252 — 2021-05-28
FileHash-SHA256 d035d394a82ae1e44b25e273f99eae8e2369da828d6b6fdb95076fd3eb5de142 — 2021-05-28
FileHash-SHA256 ee44c0692fd2ab2f01d17ca4b58ca6c7f79388cbc681f885bb17ec946514088c — 2021-05-28
FileHash-SHA256 0585ed374f47d823f8fcbb4054ad06980b1fe89f3fa3484558e7d30f7b6e9597 SHA256 of 182a7a2a0f84d11d832bc7b847677f086c2db757 2021-06-02
FileHash-SHA256 065e9471fb4425ec0b3a2fd15e1546d66002caca844866b0764cbf837c21a72a — 2021-06-02
FileHash-SHA256 0acb884f2f4cfa75b726cb8290b20328c8ddbcd49f95a1d761b7d131b95bafec SHA256 of 5fb5074d1036245ab7fb936a83556a2d5862328c 2021-06-02
FileHash-SHA256 0c14a791f8a48d2944a9fa842f45becb7309ad004695e38f48fca69135d327c6 — 2021-06-02
FileHash-SHA256 112f92cfecdc4e177458bc1caebcc4420b5879840f137f249fac360ddac64ddd — 2021-06-02
FileHash-SHA256 117317d623003995d639975774edd1bfe38cec7d24b22d3e48d22c91cf8636bb — 2021-06-02
FileHash-SHA256 136f4083b67bc8dc999eb15bb83042aeb01791fc0b20b5683af6b4ddcf0bbc7d SHA256 of 91f9ee61662317e13fd8a73506dd7cd780c417dc 2021-06-02
FileHash-SHA256 194f4d1823e93905ee346d7e1fffc256e0befd478735f4b961954df52558c618 — 2021-06-02
FileHash-SHA256 1c17c39af41a5d8f54441ce6b1cf925f6727a2ee9038284a8a7071c984d0460f — 2021-06-02
FileHash-SHA256 1f5a915e75ad96e560cee3e24861cf6f8de299fdf79e1829453defbfe2013239 — 2021-06-02
FileHash-SHA256 23e20d630a8fd12600c2811d8f179f0e408dcb3e82600456db74cbf93a66e70f SHA256 of 8d32ee818a3a02a58db3747a22df767cfc49ef23 2021-06-02
FileHash-SHA256 24caf54e7c3fe308444093f7ac64d6d520c8f44ea4251e09e24931bdb72f5548 SHA256 of 846620d647314390d641e6400733ceddc5b21ce3 2021-06-02
FileHash-SHA256 279d5ef8f80aba530aaac8afd049fa171704fc703d9cfe337b56639732e8ce11 SHA256 of 9cf1847cf6d5b4d858e89f3dee87e398ead25136 2021-06-02
FileHash-SHA256 2836e5553e1ae52a1591545b362d1a630e3fef7e6b7e8342a84008fe4a6473a9 — 2021-06-02
FileHash-SHA256 292e5b0a12fea4ff3fc02e1f98b7a370f88152ce71fe62670dd2f5edfaab2ff8 SHA256 of dd17765749d92d98eba5dfb869d027acf8e45731 2021-06-02
FileHash-SHA256 2a352380d61e89c89f03f4008044241a38751284995d000c73acf9cad38b989e SHA256 of 6114655cf8ddfd115156a1c450ba01e31887fabb 2021-06-02
FileHash-SHA256 2ebbb99b8dae0c7b0931190fa81add987b44d4435dafcf53a9cde0f19bb91398 — 2021-06-02
FileHash-SHA256 3b94cc71c325f9068105b9e7d5c9667b1de2bde85b7abc5b29ff649fd54715c4 SHA256 of fc781887fd0579044bbf783e6c408eb0eea43485 2021-06-02
FileHash-SHA256 3c86859207ac6071220976c52cef99abf18ae37ae702c5d2268948dda370910b — 2021-06-02
FileHash-SHA256 4fbfeb7a0bb6b9841b92fa4e6b5a7bdb69c2a12ed39691c9495ff88cd6f58836 — 2021-06-02
FileHash-SHA256 574b7a80d8b9791cb74608bc4a9fcba4e4574fafef8e57bdee340728445ebd16 — 2021-06-02
FileHash-SHA256 5f7d08eb2039a9d2e99ebf3d0ef2796b93d0a01e9b8ec403fec8fcdf46448693 — 2021-06-02
FileHash-SHA256 60e20576b08a24cdaeaabc4849011885fb7517713226e2663031d9533d2187bc SHA256 of f48026a143a8b4e347298b4a99b38cda20fb19d1 2021-06-02
FileHash-SHA256 656384c4e5f9fe435d51edf910e7ba28b5c6d183587cf3e8f75fb2d798a01eeb SHA256 of 88f009eb0d6802470b883b606700508ea5db49ae 2021-06-02
FileHash-SHA256 6866041f93141697ec166fe64e35b00c5fcd5d009500ecf58dd0b7e28764b167 — 2021-06-02
FileHash-SHA256 69f0d85119123f3c2e4c052a83671732aced07312a05a3abf4ab0360c70f65de SHA256 of 6e45cc934336d7709647c1c61d9f215f15fef396 2021-06-02
FileHash-SHA256 6d08b767117a0915fb86857096b4219fd58596b42ccf61462b137432abd3920e — 2021-06-02
FileHash-SHA256 6df1d7191f6dd930642cc5c599efb54bfcc964b7a2e77f6007787de472b22a6a SHA256 of 87f423dec511678bb970cb66a84ceb4f526ff61a 2021-06-02
FileHash-SHA256 6e2069758228e8d69f8c0a82a88ca7433a0a71076c9b1cb0d4646ba8236edf23 SHA256 of b378d74d82434b5564c9efc327340174e89a09ea 2021-06-02
FileHash-SHA256 73ca0485f2c2c8ba95e00188de7f5509304e1c1eb20ed3a238b0aa9674f9104e — 2021-06-02
FileHash-SHA256 74202eed181e2b83dd0ab6f791a34a13bd94e63e86b82395f9443cb5aeddc891 SHA256 of 44b1884801c72dc8b218298aa1c537c69f2dfbfa 2021-06-02
FileHash-SHA256 749bf48a22ca161d86b6e36e71a6817b478a99d935cd721e8bf3dba716224c84 SHA256 of de8b0031ac9e0034f8e07d7d48f3b5a9aa308753 2021-06-02
FileHash-SHA256 776014a63bf3cc7034bd5b6a9c36c75a930b59182fe232535bb7a305e539967b SHA256 of 247a32ebee0595605bab77fc6ff619f66740310b 2021-06-02
FileHash-SHA256 7a3b27cf04b7f8110fc1eee5f9c4830d38ac00467fc856330115af4bffaf35b6 SHA256 of 4214cc0616f63c53c4deb9f6ce70af335edd1733 2021-06-02
FileHash-SHA256 7bf3457087ea91164f86f4bb50ddb46c469c464c300228dba793f7bfe608c83e — 2021-06-02
FileHash-SHA256 7ed1b6753c94250ad3c1c675eb644940c8104ff06a123252173c33cc1be5e434 — 2021-06-02
FileHash-SHA256 8199f309478e8ed3f03f75e7574a3e9bce09b4423bd7eb08bb5bff03af2b7c27 SHA256 of fc60899c6d0468ade1abd8e66bdf2ed4fe7e24f3 2021-06-02
FileHash-SHA256 873717ea2ea01ae6cd2c2dca9d6f832a316a6e0370071bb4ee6ecff3163f8d18 — 2021-06-02
FileHash-SHA256 88c95954800827cb68e1efdacd99093f7f9646d82613039472b5c90e5978444d — 2021-06-02
FileHash-SHA256 89016b87e97a07b4e0263a18827defdeaa3e150b1523534bbdebe7305beabb64 SHA256 of 6de2eb459ea44224d0bb08f72229478fbc3c5707 2021-06-02
FileHash-SHA256 9059c5b46dce8595fcc46e63e4ffbceeed883b7b1c9a2313f7208a7f26a0c186 SHA256 of aa5589fe1e149ef2e4274c7d548782c86b4838f2 2021-06-02
FileHash-SHA256 9301e48ea3fa7d39df871f04072ee47b9046d76aa378a1c5697f3b2c14aef1d6 SHA256 of ae2a555cf0d0cb188743923e8062410424d4b7c6 2021-06-02
FileHash-SHA256 98473e1b8f7bedd5cfa3b83dad611db48eee23faec452e62797fb7752228c759 — 2021-06-02
FileHash-SHA256 a45a77ad5c138a149aa71fb323a1e2513e7ac416be263d1783a7db380d06d2fc — 2021-06-02
FileHash-SHA256 a4f1f09a2b9bc87de90891da6c0fca28e2f88fd67034648060cef9862af9a3bf SHA256 of 19a751ff6c5abd8e209f72add9cd35dd8e3af409 2021-06-02
FileHash-SHA256 b0bfe6a8aa031f7f5972524473f3e404f85520a7553662aaf886055007a57db5 — 2021-06-02
FileHash-SHA256 b295c5ad4963bdffa764b93421c3dd512ca6733b79bdff2b99510e7d56a70935 — 2021-06-02
FileHash-SHA256 b81beb17622d4675a1c6f4efb358cc66903366df75eb5911bca725465160bdb6 — 2021-06-02
FileHash-SHA256 bca5560a9a9dd54be76e4a8d63a66e9cfd731b0bd28524db05cc498bb5b56384 — 2021-06-02
FileHash-SHA256 c4ff632696ec6e406388e1d42421b3cd3b5f79dcb2df67e2022d961d5f5a9e78 SHA256 of 95227f426d8c3f51d4b9a044254e67a75b655d6a 2021-06-02
FileHash-SHA256 ca66b671a75bbee69a4a4d3000b45d5dc7d3891c7ee5891272ccb2c5aed5746c SHA256 of c9664713467821b2fe228652396045418a72d264 2021-06-02
FileHash-SHA256 ca83d7456a49dc5b8fe71007e5ac590842b146dd5c45c9a65fe57e428a8bd7c6 SHA256 of 0588cf19b8058d5a842f9d3e9b02b3acf2524d71 2021-06-02
FileHash-SHA256 cf1d992f776421f72eabc31d5afc2f2067ae856f1c9c1d6dc643a67cb9349d8c SHA256 of 9ec1ce776d13c26f28d2346d2b4e974cb8ee9566 2021-06-02
FileHash-SHA256 cfb57906cf9c5e9c91bc4aa065f7997b1b32b88ff76f253a73ee7f6cfd8fff2f — 2021-06-02
FileHash-SHA256 d19ff098fe0f5947e08ec23be27d3a3355e14fb20135d8c4145126caa8be4b05 — 2021-06-02
FileHash-SHA256 d37347f47bb8c7831ae9bb902ed27a6ce85ddd9ba6dd1e963542fd63047b829c — 2021-06-02
FileHash-SHA256 d7c05bd68e8bde3d13aa7dbd6911461104d06715da15d3ee7f75136fa8330cc2 SHA256 of e1491c7ae53bbefccd589437877f48ecdc8a36a7 2021-06-02
FileHash-SHA256 dcf48223af8bb423a0b6d4a366163b9308e9102764f0e188318a53f18d6abd25 — 2021-06-02
FileHash-SHA256 e41a7616a3919d883beb1527026281d66e7bcdaff99600e462d36a58f1bdc794 SHA256 of 2d17a7533da3d64f166d6f92e12a4fd73ff7e319 2021-06-02
FileHash-SHA256 eae312c5ec2028a2602c9654be679ecde099b2c0b148f8d71fca43706efe4c76 SHA256 of 10bfc411ed9c7290b2bed79b8c085dbfc3f933de 2021-06-02
FileHash-SHA256 f006af714379fdd63923536d908f916f4c55480f3d07adadd53d5807e0c285ee SHA256 of 01abab121bf50daa0efd6ed2791b6dbdf944232d 2021-06-02
FileHash-SHA256 f5bc4a9ffc2d33d4f915e41090af71544d84b651fb2444ac91f6e56c1f2c70d5 — 2021-06-02
FileHash-SHA256 f7e8c9d19efd71f5c8217bf12bdd3f6c88d5f56ab65fea02dc2777c5402a18f1 — 2021-06-02
FileHash-SHA256 f88530bc87cf2c133c0a50e434ce0428694901fe7860abb42737097fdea56b30 SHA256 of 5c6ec94ef0c56f1ce12e724779c2082d615d4a93 2021-06-02
FileHash-SHA256 f9a74ac540a6584fc3ba7ccc172f948c6b716cceea313ce1d9e7b735fa2a5687 — 2021-06-02
References (5)
↗ https://www.volexity.com/blog/2021/05/27/suspected-apt29-operation-launches-election-fraud-themed-phishing-campaigns/ ↗ https://www.microsoft.com/security/blog/2021/05/27/new-sophisticated-email-based-attack-from-nobelium/ ↗ https://us-cert.cisa.gov/ncas/analysis-reports/ar21-148a ↗ https://us-cert.cisa.gov/ncas/alerts/aa21-148a ↗ https://github.com/microsoft/mstic/blob/master/Indicators/May21-NOBELIUM/May21NOBELIUMIoCs.csv