Pulse Detail — Threat Intelligence

PULSE NAME

Bitter APT continues to target Bangladesh

WHITE Bitter AlienVault 2022-07-06 Modified: 2022-08-05

IOCs

MEDIUM VOLUME

The SECUINFRA Falcon Team analysed a recent attack conducted by an advanced persistent threat group, known as Bitter, which is targeting military organisations from Bangladesh, as well as Chinese and Saudi Arabian organizations.

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1104 T1059 T1082 T1140 T1068 T1027 T1030 T1041 T1083 T1105 T1203 T1485 T1566 T1571 T1592 T1608

MALWARE FAMILIES

Almond ZxxZ MuuyDownloader

Indicators of Compromise (9 / 40 total)

All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 CVE URL YARA domain hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA1	2360e4cff14fbfb2af6c80dbd7028d682fe2634e	SHA1 of fa0ed2faa3da831976fee90860ac39d50484b20bee692ce7f0ec35a15670fa92	2022-07-06
FileHash-SHA1	2af2dcd9482a281228d987723640203e08ff93c9	SHA1 of 3fdf291e39e93305ebc9df19ba480ebd60845053b0b606a620bf482d0f09f4d3	2022-07-06
FileHash-SHA1	358867f105b517624806c3315c5426803f7c42a7	—	2022-07-06
FileHash-SHA1	8efa4d5574a0c80733e9824ec146521385a68424	—	2022-07-06
FileHash-SHA1	a47aec515f303ae7f427d98fc69fe828fa9c6ec6	—	2022-07-06
FileHash-SHA1	b17f0381fc7e4c4c6bb15dfcc0c37d2945266c6e	SHA1 of 69b397400043ec7036e23c225d8d562fdcd3be887f0d076b93f6fcaae8f3dd61	2022-07-06
FileHash-SHA1	bcc9e35c28430264575831e851182eca7219116f	—	2022-07-06
FileHash-SHA1	bcd7a2191af9ddb1bd627e36a55fc55680e36f51	SHA1 of 90fd32f8f7b494331ab1429712b1735c3d864c8c8a2461a5ab67b05023821787	2022-07-06
FileHash-SHA1	c330ef43bbee001296c6c120cf68e4c90d078d9c	—	2022-07-06

References (1)

↗ https://www.secuinfra.com/en/techtalk/whatever-floats-your-boat-bitter-apt-continues-to-target-bangladesh/