Overview 23 indicators
No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.
| domain | 16 | TA410-domain.txt |
| url | 4 | TA410.json |
| ipv4 | 3 | TA410.json |
Principal sources 10 reports
Ranked by how many of this actor's indicators each report brought in.
- 13twitter.com/AnonySecAgency/status/13162929835080130…
- 13welivesecurity.com/2022/04/27/lookback-ta410-umbrella-cybe…
- 13github.com/eset/malware-ioc/tree/master/ta410
- 13virustotal.com/gui/file/0ac8315ba368579850dfb334dbde9e…
- 13virustotal.com/gui/file/ff72aba3dc218190bc40fec95ef569…
- 13virustotal.com/gui/file/c88d0f7d623b2a2c066dd6b15597d1…
- 6proofpoint.com/us/blog/threat-insight/ta410-group-behi…
- 6otx.alienvault.com/pulse/5edf9678c760e3c7ca6fdf77
Timeline 23 indicators
Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.
No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.
-
symantec-enterprise-blogs.security.com/blogs/threat-intelligence/witchetty-ste…
a.bigbluedc.com bigbluedc.com -
twitter.com/AnonySecAgency/status/13162929835080130… · welivesecurity.com/2022/04/27/lookback-ta410-umbrella-cybe… · github.com/eset/malware-ioc/tree/master/ta410 · virustotal.com/gui/file/0ac8315ba368579850dfb334dbde9e… · virustotal.com/gui/file/ff72aba3dc218190bc40fec95ef569… · virustotal.com/gui/file/c88d0f7d623b2a2c066dd6b15597d1…
domain cahe.microsofts.com domain dlaxpcmghd.com domain eset-sync.com domain nsfwgo.com domain s.eset-sync.com domain smtp.nsfwgo.com domain translateupdate.com domain update.translateupdate.com url http://161.82.181.4 url http://43.254.216.104 url http://43.254.219.153 url http://45.124.115.103 -
twitter.com/AnonySecAgency/status/13162929835080130… · welivesecurity.com/2022/04/27/lookback-ta410-umbrella-cybe… · github.com/eset/malware-ioc/tree/master/ta410 · virustotal.com/gui/file/0ac8315ba368579850dfb334dbde9e… · virustotal.com/gui/file/ff72aba3dc218190bc40fec95ef569… · virustotal.com/gui/file/c88d0f7d623b2a2c066dd6b15597d1…
103.139.2.93:1702 -
proofpoint.com/us/blog/threat-insight/ta410-group-behi… · otx.alienvault.com/pulse/5edf9678c760e3c7ca6fdf77
asce.email daveengineer.com energysemi.com ffca.caibi379.com powersafetraining.net powersafetrainings.org -
threatpost.com/espionage-group-utilities-spy-tool/1564…
188.131.233.27:55555 188.131.233.27:55556
Further reading 10
- virustotal.com/gui/file/0ac8315ba368579850dfb334dbde9e…
- otx.alienvault.com/pulse/5edf9678c760e3c7ca6fdf77
- welivesecurity.com/2022/04/27/lookback-ta410-umbrella-cybe…
- github.com/eset/malware-ioc/tree/master/ta410
- symantec-enterprise-blogs.security.com/blogs/threat-intelligence/witchetty-ste…
- proofpoint.com/us/blog/threat-insight/ta410-group-behi…
- threatpost.com/espionage-group-utilities-spy-tool/1564…
- twitter.com/AnonySecAgency/status/13162929835080130…
- virustotal.com/gui/file/c88d0f7d623b2a2c066dd6b15597d1…
- virustotal.com/gui/file/ff72aba3dc218190bc40fec95ef569…