Threat actorhigh
The “Red October” Campaign – An Advanced Cyber Espionage Network Targeting Diplomatic and Government Agencies
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2009-3129 | CVE-2009-3129: Memory Corruption RCE in Microsoft Excel via FEATHEADER Record | — | 84% | KEV | — KEV |
| CVE-2010-3333 | Stack Buffer Overflow in Microsoft Office RTF Parsing Allows Remote Code Execution | — | 89% | KEV | — KEV |
| CVE-2012-0158 | Remote Code Execution in Microsoft MSCOMCTL.OCX (Windows Common Controls) | — | 100% | KEVRansomware | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 114ed0e5298149fc69f6e41566e3717a | of MD5s of known documents used in the Red October attacks: 114ed0e5298149fc69f6e41566e3717a 1f86299628bed519718478739b0e4b0c 2672fbba23bf4f5e139b10cacc |
| md5 | 1f86299628bed519718478739b0e4b0c | n the Red October attacks: 114ed0e5298149fc69f6e41566e3717a 1f86299628bed519718478739b0e4b0c 2672fbba23bf4f5e139b10cacc837e9f 350c170870e42dce1715a188ca |
| md5 | 2672fbba23bf4f5e139b10cacc837e9f | e5298149fc69f6e41566e3717a 1f86299628bed519718478739b0e4b0c 2672fbba23bf4f5e139b10cacc837e9f 350c170870e42dce1715a188ca20d73b 396d9e339c1fd2e787d885a688 |
| md5 | 350c170870e42dce1715a188ca20d73b | 9628bed519718478739b0e4b0c 2672fbba23bf4f5e139b10cacc837e9f 350c170870e42dce1715a188ca20d73b 396d9e339c1fd2e787d885a688d5c646 3ded9a0dd566215f04e05340cc |
| md5 | 396d9e339c1fd2e787d885a688d5c646 | ba23bf4f5e139b10cacc837e9f 350c170870e42dce1715a188ca20d73b 396d9e339c1fd2e787d885a688d5c646 3ded9a0dd566215f04e05340ccf20e0c 44e70bce66cdac5dc06d5c0d67 |
| md5 | 3ded9a0dd566215f04e05340ccf20e0c | 0870e42dce1715a188ca20d73b 396d9e339c1fd2e787d885a688d5c646 3ded9a0dd566215f04e05340ccf20e0c 44e70bce66cdac5dc06d5c0d6780ba45 4bfa449f1a351210d3c5b03ac2 |
| md5 | 44e70bce66cdac5dc06d5c0d6780ba45 | 339c1fd2e787d885a688d5c646 3ded9a0dd566215f04e05340ccf20e0c 44e70bce66cdac5dc06d5c0d6780ba45 4bfa449f1a351210d3c5b03ac2bd18b1 4ce5fd18b1d3f551a098bb26d8 |
| md5 | 4bfa449f1a351210d3c5b03ac2bd18b1 | 0dd566215f04e05340ccf20e0c 44e70bce66cdac5dc06d5c0d6780ba45 4bfa449f1a351210d3c5b03ac2bd18b1 4ce5fd18b1d3f551a098bb26d8347ffb 4daa2e7d3ac1a5c6b81a92f4a9 |
| md5 | 4ce5fd18b1d3f551a098bb26d8347ffb | ce66cdac5dc06d5c0d6780ba45 4bfa449f1a351210d3c5b03ac2bd18b1 4ce5fd18b1d3f551a098bb26d8347ffb 4daa2e7d3ac1a5c6b81a92f4a9ac21f1 50bd553568422cf547539dd1f4 |
| md5 | 4daa2e7d3ac1a5c6b81a92f4a9ac21f1 | 9f1a351210d3c5b03ac2bd18b1 4ce5fd18b1d3f551a098bb26d8347ffb 4daa2e7d3ac1a5c6b81a92f4a9ac21f1 50bd553568422cf547539dd1f49dd80d 51edea56c1e83bcbc9f873168e |
| md5 | 50bd553568422cf547539dd1f49dd80d | 18b1d3f551a098bb26d8347ffb 4daa2e7d3ac1a5c6b81a92f4a9ac21f1 50bd553568422cf547539dd1f49dd80d 51edea56c1e83bcbc9f873168e2370af 5d1121eac9021b5b01570fb58e |
| md5 | 51edea56c1e83bcbc9f873168e2370af | 7d3ac1a5c6b81a92f4a9ac21f1 50bd553568422cf547539dd1f49dd80d 51edea56c1e83bcbc9f873168e2370af 5d1121eac9021b5b01570fb58e7d4622 5ecec03853616e13475ac20a0e |
| md5 | 5d1121eac9021b5b01570fb58e7d4622 | 3568422cf547539dd1f49dd80d 51edea56c1e83bcbc9f873168e2370af 5d1121eac9021b5b01570fb58e7d4622 5ecec03853616e13475ac20a0ef987b6 5f9b7a70ca665a54f8879a6a16 |
| md5 | 5ecec03853616e13475ac20a0ef987b6 | 56c1e83bcbc9f873168e2370af 5d1121eac9021b5b01570fb58e7d4622 5ecec03853616e13475ac20a0ef987b6 5f9b7a70ca665a54f8879a6a16f6adde 639760784b3e26c1fe619e5df7 |
| md5 | 5f9b7a70ca665a54f8879a6a16f6adde | eac9021b5b01570fb58e7d4622 5ecec03853616e13475ac20a0ef987b6 5f9b7a70ca665a54f8879a6a16f6adde 639760784b3e26c1fe619e5df7d0f674 65d277af039004146061ff01bb |
| md5 | 639760784b3e26c1fe619e5df7d0f674 | 3853616e13475ac20a0ef987b6 5f9b7a70ca665a54f8879a6a16f6adde 639760784b3e26c1fe619e5df7d0f674 65d277af039004146061ff01bb757a8f 6b23732895daaad4bd6eae1d0b |
| md5 | 65d277af039004146061ff01bb757a8f | 70ca665a54f8879a6a16f6adde 639760784b3e26c1fe619e5df7d0f674 65d277af039004146061ff01bb757a8f 6b23732895daaad4bd6eae1d0b0fef08 731c68d2335e60107df2f5af18 |
| md5 | 6b23732895daaad4bd6eae1d0b0fef08 | 784b3e26c1fe619e5df7d0f674 65d277af039004146061ff01bb757a8f 6b23732895daaad4bd6eae1d0b0fef08 731c68d2335e60107df2f5af18b9f4c9 7e5d9b496306b558ba04e5a4c5 |
| md5 | 731c68d2335e60107df2f5af18b9f4c9 | af039004146061ff01bb757a8f 6b23732895daaad4bd6eae1d0b0fef08 731c68d2335e60107df2f5af18b9f4c9 7e5d9b496306b558ba04e5a4c5638f9f 82e518fb3a6749903c8dc17287 |
| md5 | 7e5d9b496306b558ba04e5a4c5638f9f | 2895daaad4bd6eae1d0b0fef08 731c68d2335e60107df2f5af18b9f4c9 7e5d9b496306b558ba04e5a4c5638f9f 82e518fb3a6749903c8dc17287cebbf8 85baebed3d22fa63ce91ffafcd |
| md5 | 82e518fb3a6749903c8dc17287cebbf8 | d2335e60107df2f5af18b9f4c9 7e5d9b496306b558ba04e5a4c5638f9f 82e518fb3a6749903c8dc17287cebbf8 85baebed3d22fa63ce91ffafcd7cc991 91ebc2b587a14ec914dd74f4cf |
| md5 | 85baebed3d22fa63ce91ffafcd7cc991 | 496306b558ba04e5a4c5638f9f 82e518fb3a6749903c8dc17287cebbf8 85baebed3d22fa63ce91ffafcd7cc991 91ebc2b587a14ec914dd74f4cfb8dd0f 93d0222c8c7b57d38931cfd712 |
| md5 | 91ebc2b587a14ec914dd74f4cfb8dd0f | fb3a6749903c8dc17287cebbf8 85baebed3d22fa63ce91ffafcd7cc991 91ebc2b587a14ec914dd74f4cfb8dd0f 93d0222c8c7b57d38931cfd712523c67 9950a027191c4930909ca23608 |
| md5 | 93d0222c8c7b57d38931cfd712523c67 | ed3d22fa63ce91ffafcd7cc991 91ebc2b587a14ec914dd74f4cfb8dd0f 93d0222c8c7b57d38931cfd712523c67 9950a027191c4930909ca23608d464cc 9b55887b3e0c7f1e41d1abdc32 |
| md5 | 9950a027191c4930909ca23608d464cc | b587a14ec914dd74f4cfb8dd0f 93d0222c8c7b57d38931cfd712523c67 9950a027191c4930909ca23608d464cc 9b55887b3e0c7f1e41d1abdc32667a93 9f470a4b0f9827d0d3ae463f44 |
| md5 | 9b55887b3e0c7f1e41d1abdc32667a93 | 2c8c7b57d38931cfd712523c67 9950a027191c4930909ca23608d464cc 9b55887b3e0c7f1e41d1abdc32667a93 9f470a4b0f9827d0d3ae463f44b227db a7330ce1b0f89ac157e335da82 |
| md5 | 9f470a4b0f9827d0d3ae463f44b227db | 27191c4930909ca23608d464cc 9b55887b3e0c7f1e41d1abdc32667a93 9f470a4b0f9827d0d3ae463f44b227db a7330ce1b0f89ac157e335da825b22c7 b9238737d22a059ff8da903fbc |
| md5 | a7330ce1b0f89ac157e335da825b22c7 | 7b3e0c7f1e41d1abdc32667a93 9f470a4b0f9827d0d3ae463f44b227db a7330ce1b0f89ac157e335da825b22c7 b9238737d22a059ff8da903fbc69c352 c78253aefcb35f94acc63585d7 |
| md5 | b9238737d22a059ff8da903fbc69c352 | 4b0f9827d0d3ae463f44b227db a7330ce1b0f89ac157e335da825b22c7 b9238737d22a059ff8da903fbc69c352 c78253aefcb35f94acc63585d7bfb176 fc3c874bdaedf731439bbe28fc |
| md5 | bb2f6240402f765a9d0d650b79cd2560 | aefcb35f94acc63585d7bfb176 fc3c874bdaedf731439bbe28fc2e6bbe bb2f6240402f765a9d0d650b79cd2560 bd05475a538c996cd6cafe72f3a98fae c42627a677e0a6244b84aa977f |
| md5 | bd05475a538c996cd6cafe72f3a98fae | 4bdaedf731439bbe28fc2e6bbe bb2f6240402f765a9d0d650b79cd2560 bd05475a538c996cd6cafe72f3a98fae c42627a677e0a6244b84aa977fbea15d cb51ef3e541e060f0c56ac10ad |
| md5 | c42627a677e0a6244b84aa977fbea15d | 40402f765a9d0d650b79cd2560 bd05475a538c996cd6cafe72f3a98fae c42627a677e0a6244b84aa977fbea15d cb51ef3e541e060f0c56ac10adef37c3 ceac9d75b8920323477e8a4acd |
| md5 | c78253aefcb35f94acc63585d7bfb176 | e1b0f89ac157e335da825b22c7 b9238737d22a059ff8da903fbc69c352 c78253aefcb35f94acc63585d7bfb176 fc3c874bdaedf731439bbe28fc2e6bbe bb2f6240402f765a9d0d650b79 |
| md5 | cb51ef3e541e060f0c56ac10adef37c3 | 5a538c996cd6cafe72f3a98fae c42627a677e0a6244b84aa977fbea15d cb51ef3e541e060f0c56ac10adef37c3 ceac9d75b8920323477e8a4acdae2803 cee7bd726bc57e601c85203c57 |
| md5 | ceac9d75b8920323477e8a4acdae2803 | a677e0a6244b84aa977fbea15d cb51ef3e541e060f0c56ac10adef37c3 ceac9d75b8920323477e8a4acdae2803 cee7bd726bc57e601c85203c5767293c d71a9d26d4bb3b0ed189c79cd2 |
| md5 | cee7bd726bc57e601c85203c5767293c | 3e541e060f0c56ac10adef37c3 ceac9d75b8920323477e8a4acdae2803 cee7bd726bc57e601c85203c5767293c d71a9d26d4bb3b0ed189c79cd24d179a d98378db4016404ac558f9733e |
| md5 | d71a9d26d4bb3b0ed189c79cd24d179a | 75b8920323477e8a4acdae2803 cee7bd726bc57e601c85203c5767293c d71a9d26d4bb3b0ed189c79cd24d179a d98378db4016404ac558f9733e906b2b dc4a977eaa2b62ad7785b46b40 |
| md5 | d98378db4016404ac558f9733e906b2b | 726bc57e601c85203c5767293c d71a9d26d4bb3b0ed189c79cd24d179a d98378db4016404ac558f9733e906b2b dc4a977eaa2b62ad7785b46b40c61281 dc8f0d4ecda437c3f870cd17d0 |
| md5 | dc4a977eaa2b62ad7785b46b40c61281 | 26d4bb3b0ed189c79cd24d179a d98378db4016404ac558f9733e906b2b dc4a977eaa2b62ad7785b46b40c61281 dc8f0d4ecda437c3f870cd17d010a3f6 de56229f497bf51274280ef842 |
| md5 | dc8f0d4ecda437c3f870cd17d010a3f6 | db4016404ac558f9733e906b2b dc4a977eaa2b62ad7785b46b40c61281 dc8f0d4ecda437c3f870cd17d010a3f6 de56229f497bf51274280ef84277ea54 ec98640c401e296a76ab7f2131 |
| md5 | de56229f497bf51274280ef84277ea54 | 7eaa2b62ad7785b46b40c61281 dc8f0d4ecda437c3f870cd17d010a3f6 de56229f497bf51274280ef84277ea54 ec98640c401e296a76ab7f213164ef8c f0357f969fbaf798095b43c9e7 |
| md5 | ec98640c401e296a76ab7f213164ef8c | 4ecda437c3f870cd17d010a3f6 de56229f497bf51274280ef84277ea54 ec98640c401e296a76ab7f213164ef8c f0357f969fbaf798095b43c9e7a0cfa7 f16785fc3650490604ab635303 |
| md5 | f0357f969fbaf798095b43c9e7a0cfa7 | 9f497bf51274280ef84277ea54 ec98640c401e296a76ab7f213164ef8c f0357f969fbaf798095b43c9e7a0cfa7 f16785fc3650490604ab635303e61de2 |
| md5 | f16785fc3650490604ab635303e61de2 | 0c401e296a76ab7f213164ef8c f0357f969fbaf798095b43c9e7a0cfa7 f16785fc3650490604ab635303e61de2 |
| md5 | fc3c874bdaedf731439bbe28fc2e6bbe | 37d22a059ff8da903fbc69c352 c78253aefcb35f94acc63585d7bfb176 fc3c874bdaedf731439bbe28fc2e6bbe bb2f6240402f765a9d0d650b79cd2560 bd05475a538c996cd6cafe72f3 |
From the original article
12 min read at securelist.com
Here’s a link to the full paper (part 1) about our Red October research . During the next days, we’ll be publishing Part 2, which contains a detailed technical analysis of all the known modules. Please stay tuned.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.