QUIETCANARY
Essential information
- Confidence
- 100/100
- Is family
- Yes
- Published
- 19/05/2023 22:18
- Modified
- 27/03/2026 01:05
- Revoked
- No
- Author / Source
- The MITRE Corporation
- Related entities
- 38 attack patterns (mitre), 3 intrusion sets (apt), 1 sectors, 7 countries, 96 indicators, 1 campaign, 1 campaigns
Aliases
Quietcanary Tunnus
Description
Marking (TLP)
TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
External references
Related entities
Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.
Attack patterns (MITRE) (38)
Intrusion sets (APT) (3)
-
The MITRE Corporation Confidence 100
[Turla](https://attack.mitre.org/groups/G0010) is a cyber espionage threat group that has been attributed to Russia's Federal Security Service (FSB). They have compromised victims in over 50 countries since at least…
First seen 01/01/1970 · Last seen 16/11/5138 · -
Tomiris usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
Turla, UNC4210 usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
Sectors (1)
-
Government targets
Countries (7)
-
Russian Federation targets
-
Afghanistan targets
-
Belarus targets
-
Tajikistan targets
-
Kazakhstan targets
-
Ukraine targets
-
Kyrgyzstan targets
Indicators (96)
-
stix 100/100 Revoked· Valid until 04/11/2023 · Source: AlienVault
-
stix 100/100 Revoked
Win.Trojan.ComRAT-9797302-0 SHA256 of d117643019d665a29ce8a7b812268fb8d3e5aadb
· Valid until 21/12/2024 · Source: AlienVault -
stix 100/100 Revoked· Valid until 21/12/2024 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 27/07/2024 · Source: AlienVault
-
mail.mfa.uz.webmails.infoindicatesstix 100/100 Revoked· Valid until 06/08/2024 · Source: AlienVault -
stix 100/100 Revoked
ConventionEngine_Term_Users SHA256 of 4040bb7e4ebc98c22bda98680b207ec89767b759
· Valid until 27/07/2024 · Source: AlienVault -
stix 100/100 Revoked
Win64:Trojan-gen SHA256 of 02c37ccdfccfe03560a4bf069f46e8ae3a5d2348
· Valid until 21/12/2024 · Source: AlienVault -
stix 100/100 Revoked
ALFPER:Trojan:MSIL/Kapooshka.B!dha SHA256 of 459b17c42017cfdfc7eb804b5c0ee52aa6035d78
· Valid until 21/12/2024 · Source: AlienVault -
2e4391dba8410f2c72d1bc0ed0180d4b5c0ac316indicatesyara 100/100 Revoked· Valid until 13/04/2024 · Source: AlienVault -
stix 100/100 Revoked· Valid until 21/12/2024 · Source: AlienVault
Campaign (1)
-
C0026 uses
Campaigns (1)
-
C0026