QUIETCANARY
Essential information
- Confidence
- 100/100
- Is family
- Yes
- Published
- 19/05/2023 22:18
- Modified
- 27/03/2026 01:05
- Revoked
- No
- Author / Source
- The MITRE Corporation
- Related entities
- 38 attack patterns (mitre), 3 intrusion sets (apt), 1 sectors, 7 countries, 96 indicators, 1 campaign, 1 campaigns
Aliases
Quietcanary Tunnus
Description
Marking (TLP)
TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
External references
Related entities
Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.
Attack patterns (MITRE) (38)
Intrusion sets (APT) (3)
-
The MITRE Corporation Confidence 100
[Turla](https://attack.mitre.org/groups/G0010) is a cyber espionage threat group that has been attributed to Russia's Federal Security Service (FSB). They have compromised victims in over 50 countries since at least…
First seen 01/01/1970 · Last seen 16/11/5138 · -
Tomiris usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
Turla, UNC4210 usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
Sectors (1)
-
Government targets
Countries (7)
-
Russian Federation targets
-
Afghanistan targets
-
Belarus targets
-
Tajikistan targets
-
Kazakhstan targets
-
Ukraine targets
-
Kyrgyzstan targets
Indicators (96)
-
stix 100/100 Revoked
ALFPER:Trojan:MSIL/Kapooshka.B!dha SHA256 of 902b27a5fd2e5f17e5340e350afa037549ce9faa
· Valid until 21/12/2024 · Source: AlienVault -
stix 100/100 Revoked
regexpr_pos SHA256 of 66271b2536481a6b2a3ae21412ce5ef50a692cfa
· Valid until 27/07/2024 · Source: AlienVault -
stix 100/100 Revoked
ConventionEngine_Term_Users SHA256 of 9902917a3af585e695141caf347a2f19a065a7df
· Valid until 27/07/2024 · Source: AlienVault -
stix 100/100 Revoked· Valid until 10/06/2023 · Source: AlienVault
-
stix 100/100 Revoked
Win64:Trojan-gen SHA256 of da6635def86b50a5de25f148426f68d3d8ab450a
· Valid until 27/07/2024 · Source: AlienVault -
stix 100/100 Revoked
SHA256 of f8d87d5b251671af624c3eaf7ac5cc42a0acadd0
· Valid until 27/07/2024 · Source: AlienVault -
stix 100/100 Revoked· Valid until 10/06/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 21/12/2024 · Source: AlienVault
Campaign (1)
-
C0026 uses
Campaigns (1)
-
C0026