S0073 · threatengine.sh

Home/Tool / Malware/ASPXSpy

Tool / Malware

ASPXSpy

S0073 · Windows

ASPXSpy is a Web shell. It has been modified by Threat Group-3390 actors to create the ASPXTool version.

ATT&CK S0073 1 actors documented 11 indicators

Sigma rules0 YARA rules2 Live IOCs11

◆

Actors Using This

chinaAPT41

⚊

Live Indicators

11 total

Indicators are defanged for safe handling. Newest first.

Show indicators (11)urlhxxps://pastebin.com/raw/UYpTHVq02024-08-06 22:55:05 UTC
urlhxxps://pastebin.com/raw/avMEZMCR2024-01-05 22:25:07 UTC
urlhxxps://pastebin.com/raw/V7JxRYCP2024-01-04 01:25:07 UTC
urlhxxps://pastebin.com/raw/rr3HywGc2023-07-03 15:30:09 UTC
urlhxxps://pastebin.com/raw/bzTVXKZb2023-02-07 17:03:09 UTC
urlhxxps://pastebin.com/raw/J5NyVLbZ2022-10-27 20:56:09 UTC
urlhxxps://pastebin.com/raw/gXkZK3dS2022-09-12 01:28:04 UTC
urlhxxps://pastebin.com/raw/Ty045yCT2022-06-16 20:58:13 UTC
urlhxxps://pastebin.com/raw/3k52mZSW2022-02-16 02:07:04 UTC
urlhxxps://pastebin.com/raw/2FvyXcN82021-08-27 14:52:03 UTC
urlhxxps://pastebin.com/raw/beW39LtA2021-02-14 21:00:09 UTC

Aliases

ASPXSpy, ASPXTool

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

MITRE ATT&CK Malpedia MalwareBazaar ThreatFox

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin