Overview 58 indicators
No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.
| domain | 55 | EARTHBERBEROKA-domain.txt |
| ipv4 | 3 | EARTHBERBEROKA.json |
Principal sources 7 reports
Ranked by how many of this actor's indicators each report brought in.
- 57trendmicro.com/en_us/research/22/d/new-apt-group-earth…
- 57documents.trendmicro.com/assets/txt/earth-berberoka-domains-2.txt
- 57g-soft.info/security/2196/earth-berberoka-apt-iocs
- 57otx.alienvault.com/pulse/62714f1a00e250a297938915
- 57virustotal.com/gui/file/401d0b1f1a94df6a70818ef2bad80d…
- 57virustotal.com/gui/file/2c403e390f59b2c2bfafde476dc180…
- 1x.com/DaveLikesMalwre/status/1840103584672960…
Timeline 58 indicators
Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.
No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.
-
x.com/DaveLikesMalwre/status/1840103584672960…
103.43.18.71:88 -
trendmicro.com/en_us/research/22/d/new-apt-group-earth… · documents.trendmicro.com/assets/txt/earth-berberoka-domains-2.txt · g-soft.info/security/2196/earth-berberoka-apt-iocs · otx.alienvault.com/pulse/62714f1a00e250a297938915 · virustotal.com/gui/file/401d0b1f1a94df6a70818ef2bad80d… · virustotal.com/gui/file/2c403e390f59b2c2bfafde476dc180…
mmimdown.oss-cn-hongkong.aliyuncs.com -
trendmicro.com/en_us/research/22/d/new-apt-group-earth… · documents.trendmicro.com/assets/txt/earth-berberoka-domains-2.txt · g-soft.info/security/2196/earth-berberoka-apt-iocs · otx.alienvault.com/pulse/62714f1a00e250a297938915 · virustotal.com/gui/file/401d0b1f1a94df6a70818ef2bad80d… · virustotal.com/gui/file/2c403e390f59b2c2bfafde476dc180…
domain 1.googie.ph domain 12371829hkdanm.fbi.am domain 1qw6etagydbn2peifj8hf.fbi.am domain 2.googie.ph domain 3.googie.ph domain adobe-flash.wiki domain adobe.name domain agph.ivi66.net domain bos.github.wiki domain d.github.wiki domain darknet.rootkit.tools domain darwin.github.wiki domain download.mircrosoftscoulds.com domain dust.github.wiki domain exmail.googie.com.ph domain fbi.fuckbc.com domain flash.wy886066.com domain fuckbc.com domain gb.googie.ph domain github.wiki domain googie.com.ph domain googie.ph domain helloword.11i.me domain hk.whoamis.info domain hkdust.github.wiki domain huaidan.fbi.am domain ivi66.net domain linux.daj8.me domain linux.daji8.me domain linux.shopingchina.net domain linux.wy01.com domain linux.wy01.vip domain linux1.shopingchina.net domain linux2.shopingchina.net domain localhost.11i.me domain mircrosoftscoulds.com domain rc.dajuw.com domain rootkit.tools domain steam.dajuw.com domain test.mircrosoftscoulds.com domain tools.daji8.me domain update.adobe.wiki domain win.googie.ph domain wmgnews.daji8.me domain wps.daj8.me domain wpsup.daj8.me domain wy886066.com domain yabo.googie.ph ipv4 167.179.95.191:81 ipv4 45.76.199.119:83 -
trendmicro.com/en_us/research/22/d/new-apt-group-earth… · documents.trendmicro.com/assets/txt/earth-berberoka-domains-2.txt · g-soft.info/security/2196/earth-berberoka-apt-iocs · otx.alienvault.com/pulse/62714f1a00e250a297938915 · virustotal.com/gui/file/401d0b1f1a94df6a70818ef2bad80d… · virustotal.com/gui/file/2c403e390f59b2c2bfafde476dc180…
fuckyou.fbi.am list.whoamis.info -
trendmicro.com/en_us/research/22/d/new-apt-group-earth… · documents.trendmicro.com/assets/txt/earth-berberoka-domains-2.txt · g-soft.info/security/2196/earth-berberoka-apt-iocs · otx.alienvault.com/pulse/62714f1a00e250a297938915 · virustotal.com/gui/file/401d0b1f1a94df6a70818ef2bad80d… · virustotal.com/gui/file/2c403e390f59b2c2bfafde476dc180…
fuckeryoumm.nmb.bet helloword.daj8.me -
trendmicro.com/en_us/research/22/d/new-apt-group-earth… · documents.trendmicro.com/assets/txt/earth-berberoka-domains-2.txt · g-soft.info/security/2196/earth-berberoka-apt-iocs · otx.alienvault.com/pulse/62714f1a00e250a297938915 · virustotal.com/gui/file/401d0b1f1a94df6a70818ef2bad80d… · virustotal.com/gui/file/2c403e390f59b2c2bfafde476dc180…
caonimade.11i.me -
trendmicro.com/en_us/research/22/d/new-apt-group-earth… · documents.trendmicro.com/assets/txt/earth-berberoka-domains-2.txt · g-soft.info/security/2196/earth-berberoka-apt-iocs · otx.alienvault.com/pulse/62714f1a00e250a297938915 · virustotal.com/gui/file/401d0b1f1a94df6a70818ef2bad80d… · virustotal.com/gui/file/2c403e390f59b2c2bfafde476dc180…
shopingchina.net
Further reading 7
- g-soft.info/security/2196/earth-berberoka-apt-iocs
- documents.trendmicro.com/assets/txt/earth-berberoka-domains-2.txt
- virustotal.com/gui/file/401d0b1f1a94df6a70818ef2bad80d…
- x.com/DaveLikesMalwre/status/1840103584672960…
- trendmicro.com/en_us/research/22/d/new-apt-group-earth…
- otx.alienvault.com/pulse/62714f1a00e250a297938915
- virustotal.com/gui/file/2c403e390f59b2c2bfafde476dc180…