Overview 22 indicators
No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.
| domain | 21 | BATSHADOW-domain.txt |
| ipv4 | 1 | BATSHADOW.json |
Principal sources 8 reports
Ranked by how many of this actor's indicators each report brought in.
- 15x.com/Thisism23567356/status/1861367550774292…
- 15x.com/DaveLikesMalwre/status/1861387766812078…
- 15virustotal.com/gui/file/14aa9c1113184d439d6f65c6c55c1b…
- 7x.com/blackorbird/status/1975811759610208662
- 7github.com/blackorbird/APT_REPORT/blob/master/cybe…
- 7virustotal.com/gui/ip-address/103.124.95.115/relations
- 7virustotal.com/gui/ip-address/103.124.95.161/relations
- 7virustotal.com/gui/file/afed785aef35e7997e2208e45b2f91…
Timeline 22 indicators
Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.
No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.
-
x.com/blackorbird/status/1975811759610208662 · github.com/blackorbird/APT_REPORT/blob/master/cybe… · virustotal.com/gui/ip-address/103.124.95.115/relations · virustotal.com/gui/ip-address/103.124.95.161/relations · virustotal.com/gui/file/afed785aef35e7997e2208e45b2f91…
jobs-infomarriott.com jobs-marriott.com jobswork.vn mail.jobs-infomarriott.com mail.jobs-marriott.com mail.jobswork.vn workjobs.net -
x.com/Thisism23567356/status/1861367550774292… · x.com/DaveLikesMalwre/status/1861387766812078… · virustotal.com/gui/file/14aa9c1113184d439d6f65c6c55c1b…
api.samsungcareers.work api3.samsungcareers.work get-reponse-subt1.duckdns.org get-reponse-subt4.duckdns.org img.samsungcareers.work panel2.samsungcareers.work -
x.com/Thisism23567356/status/1861367550774292… · x.com/DaveLikesMalwre/status/1861387766812078… · virustotal.com/gui/file/14aa9c1113184d439d6f65c6c55c1b…
domain djactuallsbuilds.com domain ftp.spaceq.ovh domain get-reponse-subt2.duckdns.org domain get-reponse-subt3.duckdns.org domain mysupportnetflix.com domain samsung-work.com domain samsungcareers.work domain spaceq.ovh ipv4 5.252.235.172:4449
Further reading 8
- virustotal.com/gui/ip-address/103.124.95.161/relations
- virustotal.com/gui/file/14aa9c1113184d439d6f65c6c55c1b…
- x.com/DaveLikesMalwre/status/1861387766812078…
- virustotal.com/gui/file/afed785aef35e7997e2208e45b2f91…
- x.com/blackorbird/status/1975811759610208662
- virustotal.com/gui/ip-address/103.124.95.115/relations
- github.com/blackorbird/APT_REPORT/blob/master/cybe…
- x.com/Thisism23567356/status/1861367550774292…