THREAT OPS › Threat News › VTPRACTITIONERS{SEQRITE}: Tracking UNG0002, Silent Lynx and DragonClone
VTPRACTITIONERS{SEQRITE}: Tracking UNG0002, Silent Lynx and DragonClone
<h1 style="text-align: left;">Introduction </h1> <div class="interval_12">One of the best parts of being at VirusTotal (VT) is seeing <b>all the amazing ways our community uses our tools to hunt down threats</b>. We love hearing about your successes, and we think the rest of the community would too. </div> <div class="interval_12">That's why we're so excited to start <b>a new blog series where we
MITRE ATT&CK techniques
Indicators of compromise
- 8ce4fee674970e6d06f523d178a00f8e357e4796e193e9c2c9e049457932b990sha256
- 98d567329ef0c032e1416b0d31c24c92bbd008a9b48896a0a0a0ea3e1364ee05sha256
- a44827d002d7d1a74963b80e6af8a7257977f44c89caff66f126b7d1cad1fd11sha256
- fef69f8747c368979a9e4c62f4648ea233314b5f41981d9c01c1cdd96fb07365sha256
- ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0sha256
- 645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992sha256
- 99b4e5347f2c92e8a7aeac6dc7a4175104a8ba3354e022684bd3780ea9224137sha256
- https://www.seqrite.com/url
- https://www.seqrite.com/blog/category/cybersecurity/apt/url
- https://www.seqrite.com/blog/ung0002-espionage-campaigns-south-asia/url
- https://www.seqrite.com/blog/operation-cobalt-whisper-targets-industries-hong-kong-pakistan/url
- https://www.virustotal.com/gui/search/metadata%253A%25222015%253A07%253A10%252003%253A27%253A31%252B00%253A00%2522%2520filename%253A%2522imebroker%252Eexe%2522?type=filesurl
- https://www.virustotal.com/gui/search/malware_config%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
- https://www.virustotal.com/gui/search/metadata%253A%2522laptop-g5qalv96%2522?type=filesurl
- https://www.virustotal.com/gui/search/type%253Azip%2520AND%2520(metadata%253A%2522lnk%2522%2520AND%2520metadata%253A%2522%252Evbs%2522%2520AND%2520metadata%253A%2522%252Epdf%2522)%2520and%2520submitter%253AHK?type=filesurl
- https://www.seqrite.com/blog/silent-lynx-apt-targeting-central-asian-entities/url
- https://www.virustotal.com/gui/file/8ce4fee674970e6d06f523d178a00f8e357e4796e193e9c2c9e049457932b990url
- https://gtidocs.virustotal.com/docs/livehunt-guideurl
- https://www.virustotal.com/gui/file/98d567329ef0c032e1416b0d31c24c92bbd008a9b48896a0a0a0ea3e1364ee05url
- https://www.virustotal.com/gui/file/a44827d002d7d1a74963b80e6af8a7257977f44c89caff66f126b7d1cad1fd11url
- https://www.virustotal.com/gui/search/submitter%253AUZ%2520or%2520submitter%253ATMurl
- https://docs.virustotal.com/docs/collections-introductionurl
- https://www.seqrite.com/blog/operation-dragonclone-chinese-telecom-veletrix-vshell-malware/url
- https://www.virustotal.com/gui/file/fef69f8747c368979a9e4c62f4648ea233314b5f41981d9c01c1cdd96fb07365/url
- https://www.virustotal.com/gui/file/ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0url
- https://docs.virustotal.com/docs/crowdsourced-sigma-rulesurl
- https://www.virustotal.com/ui/sigma_rulesurl
- https://www.virustotal.com/gui/file/645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992url
- https://www.virustotal.com/gui/search/malware_config%253A%2522qwe123qwe%2522?type=filesurl
- https://security.googlecloudcommunity.com/community-blog-42/consuming-backscatter-information-to-perform-threat-hunting-3938url
- https://steamcommunity.com/profiles/76561198780612393url
- https://www.seqrite.com/blog/silent-lynx-apt-targeting-central-asian-entities/#:~:text=by%20this%20loader.-,Stage%203%20%E2%80%93%20Malicious%20PowerShell%20Script,-Now%2C%20post%20decodingurl
- practitioners@virustotal.comemail
- blogger.googleusercontent.comdomain