DALBIT

Overview 17 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

Principal sources 5 reports

Ranked by how many of this actor's indicators each report brought in.

• 151275.ru/ioc/1401/dalbit-m00nlight-apt-iocs/ (Ru…
• 15asec.ahnlab.com/en/47455
• 15otx.alienvault.com/pulse/63ed0da62aae6e8426eeb9ce
• 2asec.ahnlab.com/ko/56715
• 2virustotal.com/gui/file/af1d3ce6dcec8c320f7985f8e07307…

Timeline 17 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.

1. 2023-09-05 2 domain3 yrs ago

   asec.ahnlab.com/ko/56715 · virustotal.com/gui/file/af1d3ce6dcec8c320f7985f8e07307…

   lt.yxavkb.xyz

   yxavkb.xyz

   copy batch

2. 2023-02-18 5 ipv43 yrs ago

   1275.ru/ioc/1401/dalbit-m00nlight-apt-iocs/ (Ru… · asec.ahnlab.com/en/47455 · otx.alienvault.com/pulse/63ed0da62aae6e8426eeb9ce

   103.118.42.208:8080

   175.24.32.228:8888

   91.217.139.117:8001

   91.217.139.117:8080

   91.217.139.117:8443

   copy batch

3. 2023-02-16 7 domain, 3 ipv43 yrs ago

   1275.ru/ioc/1401/dalbit-m00nlight-apt-iocs/ (Ru… · asec.ahnlab.com/en/47455 · otx.alienvault.com/pulse/63ed0da62aae6e8426eeb9ce

   domain	aa.zxcss.com
   domain	ff.m00nlight.top
   domain	fk.m00nlight.top
   domain	m00nlight.top
   domain	mod.m00nlight.top
   domain	sk1.m00nlight.top
   domain	zxcss.com
   ipv4	45.136.186.175:443
   ipv4	45.93.28.103:8080
   ipv4	45.93.31.75:7777

   copy batch

Further reading 5

• asec.ahnlab.com/en/47455
• otx.alienvault.com/pulse/63ed0da62aae6e8426eeb9ce
• asec.ahnlab.com/ko/56715
• virustotal.com/gui/file/af1d3ce6dcec8c320f7985f8e07307…
• 1275.ru/ioc/1401/dalbit-m00nlight-apt-iocs/ (Ru…