2024-07-10 Patch or Peril A Veeam vulnerability incident| Threat Intelligence Malaysia

📃Title: Patch or Peril: A Veeam vulnerability incident
📅Date: 2024-07-10
🔗References:

https://www.group-ib.com/blog/estate-ransomware/

🔖Rectifyq Taxonomies:

relevancy: 🔴 Highly Relevant
category: ⚔Threat
sub-category: intrusion-analysis
target: broad-based
MY-relevancy: relevant

🔖MISP Galaxies:

producer Group-IB
target-information=“France”
target-information=“Hong Kong”
target-information=“Malaysia”
target-information=“United Arab Emirates”
target-information=“United States”
mitre-attack-pattern=[‘T1070.001’, ‘T1555’, ‘T1486’, ‘T1562.001’, ‘T1087.002’, ‘T1133’, ‘T1070.004’, ‘T1136.001’, ‘T1204.002’, ‘T1571’, ‘T1021.001’, ‘T1018’, ‘T1505.001’, ‘T1053.005’, ‘T1569.002’, ‘T1078’, ‘T1071.001’]

MISP event uuid: 7e4ee64e-fd50-4eae-ad50-abe0022f5401

Indicator of Compromise (IoCs)

type,value,comment
ip-dst, 149.28.106.252, ''
ip-dst, 149.28.99.61, ''
ip-dst, 45.76.232.205, ''
sha1, cb704d2e8df80fd3500a5b817966dc262d80ddb8, ''
sha1, 2c56e9beea9f0801e0110a7dc5549b4fa0661362, ''
sha1, 5e460a517f0579b831b09ec99ef158ac0dd3d4fa, ''
sha1, 107ec3a7ed7ad908774ad18e3e03d4b999d4690c, ''

Full IOCs available in Rectifyq's MISP```