GOLDMELODY

Overview 12 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

Principal sources 2 reports

Ranked by how many of this actor's indicators each report brought in.

• 12secureworks.com/research/gold-melody-profile-of-an-init…
• 12otx.alienvault.com/pulse/6511e50028c3953453406132

Related groups 1

What the sources have in common — not a claim that these are the same actor. See the whole graph.

• UNC961
  2 shared indicators

Timeline 12 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.

1. 2023-10-14 5 ipv4, 3 url3 yrs ago

   secureworks.com/research/gold-melody-profile-of-an-init… · otx.alienvault.com/pulse/6511e50028c3953453406132

   ipv4	149.28.207.120:443
   ipv4	195.123.240.183:443
   ipv4	40.76.20.11:21
   ipv4	64.190.113.185:443
   ipv4	67.205.135.147:53
   url	http://149.28.207.120
   url	http://195.123.240.183
   url	http://64.190.113.185

   copy batch

2. 2023-01-24 1 ipv4, 1 url3 yrs ago

   secureworks.com/research/gold-melody-profile-of-an-init… · otx.alienvault.com/pulse/6511e50028c3953453406132

   ipv4	149.28.193.216:443
   url	http://149.28.193.216

   copy batch

3. 2022-03-30 1 ipv4, 1 url4 yrs ago

   secureworks.com/research/gold-melody-profile-of-an-init… · otx.alienvault.com/pulse/6511e50028c3953453406132

   ipv4	149.28.200.140:443
   url	http://149.28.200.140

   copy batch

Further reading 2

• otx.alienvault.com/pulse/6511e50028c3953453406132
• secureworks.com/research/gold-melody-profile-of-an-init…