MRxC0DER
· Published 21/12/2025 05:45 · Modified 21/12/2025 05:45
· Source: AlienVault
Essential information
- Confidence
- 100/100
- Published
- 21/12/2025 05:45
- Modified
- 21/12/2025 05:45
- Updated at
- 21/12/2025 05:45
- Revoked
- No
- Author / Source
- AlienVault
- Resource level
- —
- Primary motivation
- —
- Related entities
- 1 reports, 9 attack patterns (mitre), 1 malware, 1 sectors, 24 indicators
Description
No description.
Marking (TLP)
TLP:CLEAR
Related entities
Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.
Reports (1)
-
9 MITREs 1 Malware 25 Observables 1 APT
Attack patterns (MITRE) (9)
-
T1204 usesUser Execution MITRE
-
T1539 usesSteal Web Session Cookie MITRE
-
T1114 usesEmail Collection MITRE
-
T1090.004 usesDomain Fronting MITRE
-
T1027 usesObfuscated Files or Information MITRE
-
T1132.001 usesStandard Encoding MITRE
-
T1566.001 usesSpearphishing Attachment MITRE
-
T1567 usesExfiltration Over Web Service MITRE
-
T1557 usesAdversary-in-the-Middle MITRE
Malware (1)
-
Caffeine usesFamily
Sectors (1)
-
Finance targets
Indicators (24)
-
zaq.gletber.comindicates -
432b1b688e21e43d2ccc68e040b3ecac4734b7d1d4356049f9e1297814627cb3indicates -
0f5be6f53fe198ca32d82a75339fe832b70d676563ce8b7ca446d1902b926856indicates -
stream-verify-login.comindicates -
crax.tubeindicates -
https://crax.tube/@caffeinestoreindicates -
f99b01620ef174bb48e22e54327ca9cffa4520868f49a41c524b81ab6d935070indicates -
httbin.orgindicates -
4751234ac4e1b0a5d4685b870de1ea1a7754258977f5d1d9534631c09c748732indicates -
v744.r9gh2.comindicates -
verify-office-outlook.comindicates -
56789iugtfrd5t69i9ei9die9di9eidy7u889.rhiltons.comindicates