QUIETCANARY
Essential information
- Confidence
- 100/100
- Is family
- Yes
- Published
- 19/05/2023 22:18
- Modified
- 27/03/2026 01:05
- Revoked
- No
- Author / Source
- The MITRE Corporation
- Related entities
- 38 attack patterns (mitre), 3 intrusion sets (apt), 1 sectors, 7 countries, 96 indicators, 1 campaign, 1 campaigns
Aliases
Quietcanary Tunnus
Description
Marking (TLP)
TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
External references
Related entities
Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.
Attack patterns (MITRE) (38)
Intrusion sets (APT) (3)
-
The MITRE Corporation Confidence 100
[Turla](https://attack.mitre.org/groups/G0010) is a cyber espionage threat group that has been attributed to Russia's Federal Security Service (FSB). They have compromised victims in over 50 countries since at least…
First seen 01/01/1970 · Last seen 16/11/5138 · -
Tomiris usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
Turla, UNC4210 usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
Sectors (1)
-
Government targets
Countries (7)
-
Russian Federation targets
-
Afghanistan targets
-
Belarus targets
-
Tajikistan targets
-
Kazakhstan targets
-
Ukraine targets
-
Kyrgyzstan targets
Indicators (96)
-
stix 100/100 Revoked· Valid until 04/11/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 27/07/2024 · Source: AlienVault
-
stix 100/100 Revoked
Win64:Trojan-gen SHA256 of 292c3602eb0213c9a0123fdaae522830de3fad95
· Valid until 27/07/2024 · Source: AlienVault -
stix 100/100 Revoked· Valid until 21/12/2024 · Source: AlienVault
-
stix 100/100 Revoked
Recon_Commands_Windows_Gen1 SHA256 of b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae
· Valid until 21/12/2024 · Source: AlienVault -
stix 100/100 Revoked
stack_string SHA256 of ca16a95cd38707bad2dc524bb3086b3c0cb3e372
· Valid until 21/12/2024 · Source: AlienVault -
stix 100/100 Revoked
ALFPER:Trojan:Win32/RoubmaniPot.A!dha SHA256 of 15e710a107830b193124a6d2bbc785b9383262a9
· Valid until 21/12/2024 · Source: AlienVault -
mail.arlingtonhousing.usindicatesstix 100/100 Revoked· Valid until 31/12/2024 · Source: AlienVault -
stix 100/100 Revoked
DotNET_SmartAssembly
· Valid until 21/12/2024 · Source: AlienVault
Campaign (1)
-
C0026 uses
Campaigns (1)
-
C0026