60

Overview 14 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

Principal sources 12 reports

Ranked by how many of this actor's indicators each report brought in.

• 6x.com/blackorbird/status/1843929280415490335
• 6app.validin.com/detail?find=WIN-S5H0DDH257T&type=raw#ta…
• 6app.validin.com/detail?find=WIN-R92OFI6ANNT&type=raw#ta…
• 6app.validin.com/detail?find=WIN-9M19PDUO1OV&type=raw#ta…
• 5threatbook.io/blog/Military-Topics-in-Focus:-APT-C-60…
• 5virustotal.com/gui/ip-address/162.222.215.164/relations
• 2global.ptsecurity.com/analytics/pt-esc-threat-intelligence/da…
• 1welivesecurity.com/en/eset-research/analysis-of-two-arbitr…

Timeline 14 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.

1. 2024-11-15 2 url2 yrs ago

   global.ptsecurity.com/analytics/pt-esc-threat-intelligence/da…

   http://104.168.169.138

   http://192.236.209.113

   copy batch

2. 2024-10-12 1 domain, 5 ipv42 yrs ago

   x.com/blackorbird/status/1843929280415490335 · app.validin.com/detail?find=WIN-S5H0DDH257T&type=raw#ta… · app.validin.com/detail?find=WIN-R92OFI6ANNT&type=raw#ta… · app.validin.com/detail?find=WIN-9M19PDUO1OV&type=raw#ta…

   domain	juanjuan.cesy.top
   ipv4	103.187.26.174:443
   ipv4	103.187.26.175:443
   ipv4	103.187.26.176:443
   ipv4	103.187.26.177:443
   ipv4	203.174.87.18:443

   copy batch

3. 2024-08-28 1 domain2 yrs ago

   welivesecurity.com/en/eset-research/analysis-of-two-arbitr… · virustotal.com/gui/file/d0c554c836f955997316acf30b5039… · virustotal.com/gui/file/b62c9168fcde444dbc3be1593e8074… · virustotal.com/gui/file/861911e953e6fd0a015b3a91a7528a… · virustotal.com/gui/file/4b74d5e09bca4898a782e938a8f988…

   rammenale.com

   copy batch

4. 2023-07-25 2 domain, 3 url3 yrs ago

   threatbook.io/blog/Military-Topics-in-Focus:-APT-C-60… · virustotal.com/gui/ip-address/162.222.215.164/relations

   domain	milfbate.com
   domain	nimdsrt.com
   url	http://192.67.255.191
   url	http://23.254.225.177
   url	http://51.210.235.46

   copy batch

Further reading 12

• welivesecurity.com/en/eset-research/analysis-of-two-arbitr…
• app.validin.com/detail?find=WIN-R92OFI6ANNT&type=raw#ta…
• x.com/blackorbird/status/1843929280415490335
• virustotal.com/gui/file/861911e953e6fd0a015b3a91a7528a…
• threatbook.io/blog/Military-Topics-in-Focus:-APT-C-60…
• virustotal.com/gui/ip-address/162.222.215.164/relations
• app.validin.com/detail?find=WIN-S5H0DDH257T&type=raw#ta…
• global.ptsecurity.com/analytics/pt-esc-threat-intelligence/da…
• virustotal.com/gui/file/b62c9168fcde444dbc3be1593e8074…
• virustotal.com/gui/file/4b74d5e09bca4898a782e938a8f988…
• app.validin.com/detail?find=WIN-9M19PDUO1OV&type=raw#ta…
• virustotal.com/gui/file/d0c554c836f955997316acf30b5039…