Pulse Detail — Threat Intelligence

PULSE NAME

Earth Preta Campaign Uses DOPLUGS to Target Asia

WHITE CyberHunter_NL 2024-02-20 Modified: 2024-03-21

IOCs

HIGH VOLUME

Trend Vision One is a comprehensive platform for threat protection and cyber risk management, designed for the cloud and multi-cloud world. £1.5bn of sales worldwide in 2017-18

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1005 T1012 T1016 T1025 T1036 T1049 T1053 T1056 T1070 T1071 T1082 T1083 T1090 T1091 T1140 T1204 T1547 T1564 T1566 T1573 T1574 T1583 T1585 T1587 T1588 T1608 T1105 T1027 T1176 T1059

MALWARE FAMILIES

SMUGX Earth Preta THOR PlugX DOPLUGS PlugX

Indicators of Compromise (2 / 60 total)

All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-MD5	299ed8a1fed6d9b9932d43567904be25	MD5 of 93624d0ad03998dd267ae8048ff05e25b5fd5f7b4116a2aff88c87d42422d5dc	2024-02-20
FileHash-MD5	eb941fbca579d3c0966de86b904fc298	MD5 of d64afd9799d8de3f39a4ce99584fa67a615a667945532cfa3f702adbe27724c4	2024-02-20

References (1)

↗ https://www.trendmicro.com/en_us/research/24/b/earth-preta-campaign-targets-asia-doplugs.html