Overview 59 indicators
No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.
| domain | 55 | SCIERON-domain.txt |
| url | 3 | SCIERON.json |
| ipv4 | 1 | SCIERON.json |
Principal sources 16 reports
Ranked by how many of this actor's indicators each report brought in.
- 36symantec.com/content/en/us/enterprise/media/security…
- 11welivesecurity.com/en/eset-research/scarabs-colon-izing-vu…
- 11otx.alienvault.com/pulse/64e62628ed1119d03d3db75a
- 11virustotal.com/gui/file/f33f012efbd536bae89ded0b45271b…
- 4threatfox.abuse.ch/browse/malware/win.scarab_ransom/ (# 20…
- 4twitter.com/h2jazi/status/1505887653111209994
- 4twitter.com/fstenv/status/1505915405562482696
- 4twitter.com/aRtAGGI/status/1506010831221248002
Timeline 59 indicators
Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.
No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.
-
welivesecurity.com/en/eset-research/cosmicbeetle-steps-up-… · github.com/eset/malware-ioc/tree/master/cosmicbeet…
lockbitblog.info up.vctel.com -
threatfox.abuse.ch/browse/malware/win.scarab_ransom/ (# 20…
domain us.notfound.my.id url http://103.61.225.186 url http://154.61.74.33 url http://24.144.120.189 -
welivesecurity.com/en/eset-research/scarabs-colon-izing-vu… · otx.alienvault.com/pulse/64e62628ed1119d03d3db75a · virustotal.com/gui/file/f33f012efbd536bae89ded0b45271b…
akamaicdnup.com b.688.org cdnupdate.net d.piii.net ss.688.org sys.688.org u.cbu.net u.piii.net up.awiki.org update.cbu.net update.inet2.org -
twitter.com/jaydinbas/status/1663916211975987201 · virustotal.com/gui/file/71c87103296e5ccc2ff34316668a7e… · virustotal.com/gui/file/cb611e5e85c3f730116630d47ec136…
d1lhk2kflvant7.cloudfront.net -
virustotal.com/gui/file/6bcb972bbd526433d9ad733eb7acfe…
autocar.suroot.com -
twitter.com/h2jazi/status/1505887653111209994 · twitter.com/fstenv/status/1505915405562482696 · twitter.com/aRtAGGI/status/1506010831221248002 · cert.gov.ua/article/38097 (Ukrainian) · virustotal.com/gui/file/7239cac92aaf6bbbbf4e657bc65a38…
domain ebook.port25.biz ipv4 104.155.198.25:8080 -
twitter.com/h2jazi/status/1505887653111209994 · twitter.com/fstenv/status/1505915405562482696 · twitter.com/aRtAGGI/status/1506010831221248002 · cert.gov.ua/article/38097 (Ukrainian) · virustotal.com/gui/file/7239cac92aaf6bbbbf4e657bc65a38…
mert.my03.com product2020.mrbasic.com -
symantec.com/content/en/us/enterprise/media/security…
ndcinformation.acmetoy.com service.authorizeddns.net text-first.trickip.org -
symantec.com/content/en/us/enterprise/media/security…
Markshell.etowns.net apple.dynamic-dns.net autocar.ServeUser.com blackblog.chatnook.com bulldog.toh.info cew58e.xxxy.info coastnews.darktech.org demon.4irc.com dynamic.ddns.mobi expert.4irc.com football.mrbasic.com gjjb.flnet.org imirnov.ddns.info jingnan88.chatnook.com lehnjb.epac.to logoff.25u.com logoff.ddns.info ls910329.my03.com mailru.25u.com mydear.ddns.info nazgul.zyns.com newdyndns.scieron.com newoutlook.darktech.org photocard.4irc.com pricetag.deaftone.com rubberduck.gotgeeks.com shutdown.25u.com sorry.ns2.name sskill.b0ne.com text-First.flnet.org uudog.4pu.com will-smith.dtdns.net yellowblog.flnet.org
Further reading 16
- symantec.com/content/en/us/enterprise/media/security…
- virustotal.com/gui/file/7239cac92aaf6bbbbf4e657bc65a38…
- virustotal.com/gui/file/f33f012efbd536bae89ded0b45271b…
- virustotal.com/gui/file/71c87103296e5ccc2ff34316668a7e…
- virustotal.com/gui/file/cb611e5e85c3f730116630d47ec136…
- welivesecurity.com/en/eset-research/cosmicbeetle-steps-up-…
- twitter.com/h2jazi/status/1505887653111209994
- twitter.com/aRtAGGI/status/1506010831221248002
- github.com/eset/malware-ioc/tree/master/cosmicbeet…
- threatfox.abuse.ch/browse/malware/win.scarab_ransom/ (# 20…
- cert.gov.ua/article/38097 (Ukrainian)
- otx.alienvault.com/pulse/64e62628ed1119d03d3db75a
- twitter.com/fstenv/status/1505915405562482696
- twitter.com/jaydinbas/status/1663916211975987201
- virustotal.com/gui/file/6bcb972bbd526433d9ad733eb7acfe…
- welivesecurity.com/en/eset-research/scarabs-colon-izing-vu…