PULSE NAME
From South America to Southeast Asia: The Fragile Web of REF7707 — Elastic Security Labs
WHITE CyberHunter_NL 2025-02-14 Modified: 2025-03-16
72
IOCs
HIGH VOLUME
A detailed analysis of the malware used to infiltrate a foreign ministry in South America, as part of a multi-million dollar cyber-attack, reveals details about the operation, the tactics and infrastructure used by the attackers.
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
C:\\Windows\\system32\\net1 PATHLOADER FINALDRAFT
Indicators of Compromise (2 / 72 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL https://mrd0x.com/the-power-of-cdb-debugging-tool/ 2025-02-14
URL https://support.vmphere.com 2025-02-14