Sobre el grupo
SilverTerrier is a Nigerian threat group that has been seen active since 2014. SilverTerrier mainly targets organizations in high technology, higher education, and manufacturing.
Técnicas (MITRE ATT&CK) 4
Cómo opera el grupo, mapeado por la matriz MITRE ATT&CK y organizado por las fases de un ataque.
Vulnerabilidades explotadas
Ninguna CVE atribuida a este grupo en las fuentes públicas (MITRE ATT&CK). La ausencia de atribución no significa ausencia de actividad.
Infraestructura conocida 574
Indicadores reales (C2, dominios, URLs y hashes) asociados al malware que usa este grupo. Fuente: abuse.ch (ThreatFox, URLhaus, MalwareBazaar).
6ccc3ab2d841beb56ac6854d1a0445cf87ee746600234b53f167bac3a14fadc2AgentTeslamalwarebazaarcacb33f852ed1a7206a3b87e388c2b2710c4c659afc15d9f600e1509278049b2AgentTeslamalwarebazaar8315f56af982fb8f27e8df26a94e948766446e6bdd714368cb6942a663fc1c2aAgentTeslamalwarebazaar36f6f8a754e37a09b84478de5df78b39be9776e1fe6d43b2272c077bd7937d98AgentTeslamalwarebazaar4582612d20d8564575dc4fc21ebff73e4dbac2f0c254f5b44021896a7d97f202AgentTeslamalwarebazaar3d22a007f0e5878fa47d9ded220b605dAgent Teslathreatfoxcda5991df1a2598c1782c9eabb62755f83d6912bAgent Teslathreatfox44c2f46e91c4b65b6f0c8385910af36a4255bba0fdd7bfccf2199e7a9faf19f7Agent Teslathreatfox00b61ee4c9907cb2dc9daadeacaa3e05Agent Teslathreatfoxdc1e99af1aeb99dd7366b04c12f4d8c878b3e7c1Agent Teslathreatfoxfd0d23011657d0185f6e4fb5fe57eb7894c9fc606b9ae5fc6b977efcb2ef1eebAgent Teslathreatfoxhttps://firebasestorage.googleapis.com/v0/b/a30a-33e89d-acefa0.firebasestorage.app/o/classLincoln.ps1?alt=media&token=0291b02f-3b54-4246-bc6d-6381c104d705AgentTeslaurlhaushttp://23.132.164.15/FAST/steinn.ps1AgentTeslaurlhaus84de969fa7d734128d5293c458e736694b0eb42313b5d165d0ee44ca9cf888a7Agent Teslathreatfoxhttps://fullhouse.ae/js/TRUE.zipAgentTeslaurlhaushttp://185.29.10.68/xdZGCANqNpylcDzT208.binAgentTeslaurlhaushttp://185.29.9.42/Retslokalet.lpkAgentTeslaurlhaushttp://23.132.164.15/FAST/stein.ps1AgentTeslaurlhaus202c71cccc63a9bad0c94b898a6447c2723724c7c534bfb7f2143eb6a50a2196Agent Teslathreatfox39ac2c4015532e8b06bf54ecebe497ebf2652c1a55e67605fa0c2618c2735906Agent Teslathreatfox188.132.242.67:8731DarkCometthreatfox47fa97e2a70af9612d5c0a024ba4cce2163aacad465e8fc4bf6abe1bd98bbb88NanoCoremalwarebazaarhttps://pub-fcf9a4a0a9f54d8b8240c682f65e12f9.r2.dev/tropvast.vbsAgentTeslaurlhaushttps://pub-a327f9d03def4b07b51dba5303fc3620.r2.dev/ojubam.pngAgentTeslaurlhaus2b010a2351c9e8ee7e767abbba02dcdcc15032b20c178a3c0b00e1806e67db84AgentTeslamalwarebazaarhttps://gfnstuff.pages.dev/GalacticToolsV3.exeAgent Teslathreatfox87.243.97.168:100DarkCometthreatfoxa2f1061b5a9ca952c84440ea611af1df9f1871bed790ab19d8d88efd057614c1AgentTeslamalwarebazaar188.132.242.67:8087DarkCometthreatfoxhttp://urbanpro.mycpanel.rs/Ringeklokkes.aafAgentTeslaurlhaus+574 indicadores en total. Míralos todos en la página de IOCs.
Referencias
El grupo SilverTerrier usa técnicas y explota fallas reales. El Pentest Autónomo con IA de TrueHacking simula esos ataques en tu infraestructura y aporta más seguridad a tu aplicación.
Conocer el Pentest Autónomo con IA →