← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
2023 Unit 42 Attack Surface Threat Report - Palo Alto Networks
WHITE vinodmohan09 2024-01-29 Modified: 2024-01-29
11
IOCs
MEDIUM VOLUME
The latest report from Cortex Xpanse offers insights into 30 common vulnerabilities exposed via the internet and how they can be exploited by cyberattackers. and the rest of the world's IT systems.
cortexexpansecortex xpansexpanseqadiumsecurity operationsattack surface managementasminternet operations managementcloud inventoryinternet footprintinggovernance risk and compliancecloud migrationdigital transformationasset inventoryattack surfaceit asset trackingpalo alto networks threat intelligencepalo alto threat intelligencepalo alto networks unit 42palo alto unit 42unit 42unit 42 cyber securityunit 42 incident responseunit 42 proactiveunit 42 threat intelligenceunitinsightsresolvethreat reportlearnorganizationsexposurescvesransomwareunknownfindfluxspeeddownloadsysgetcrypthashdatamsiewindows ntcryptcreatehashcryptderivekeycalgmd5dragonokformerfirstratbinarydatanflogplugxwildfiremalwareratspoisonivynewctdatepythonhellobridge
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Xpanse DragonOK Sysget HelloBridge PlugX
Indicators of Compromise (11)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 01234567890123456789012345678901 — 2024-01-29
FileHash-MD5 07660815420f6d5b2dcc0f63434a6c60 — 2024-01-29
FileHash-MD5 4890c2d546fa48a536b75b48b17de023 — 2024-01-29
FileHash-MD5 70efdf2ec9b086079795c442636b55fb — 2024-01-29
FileHash-MD5 aa8ac5ed26b9bf4f8d3bd1b2dcaa82f6 — 2024-01-29
FileHash-MD5 fc1a8359e0f4cb8d60920dc066b8b21c — 2024-01-29
FileHash-SHA1 0716d9708d321ffb6a00818614779e779925365c SHA1 of 70efdf2ec9b086079795c442636b55fb 2024-01-29
FileHash-SHA256 4523540f1504cd17100c4835e85b7eefd49911580f8efff0599a8f283be6b9e3 SHA256 of 70efdf2ec9b086079795c442636b55fb 2024-01-29
URL http://https.reweblink.com:443 — 2024-01-29
domain biosnews.info — 2024-01-29
hostname https.reweblink.com — 2024-01-29
References (1)
↗ https://unit42.paloaltonetworks.com/unit-42-identifies-new-dragonok-backdoor-malware-deployed-against-japanese-targets/