WUQIONGDONG

Overview 36 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

Principal sources 4 reports

Ranked by how many of this actor's indicators each report brought in.

• 27twitter.com/Timele9527/status/1549950577349496832
• 27mp-weixin-qq-com.translate.goog/s/jX8D8d-4q46pKHS0AIVgjw?_x_tr_sl=zh-CN…
• 9mp.weixin.qq.com/s/WBpML3BTxFPHmBgyunmEEA (Chinese)
• 9otx.alienvault.com/pulse/61811ddc259f23fdd630e196

Timeline 36 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.

1. 2022-07-21 22 domain, 1 ipv4, 2 url4 yrs ago

   twitter.com/Timele9527/status/1549950577349496832 · mp-weixin-qq-com.translate.goog/s/jX8D8d-4q46pKHS0AIVgjw?_x_tr_sl=zh-CN…

   domain	blue.chinfoset.com
   domain	cchiwa.com
   domain	chinfoset.com
   domain	cloud.unite.un.org.docs-verify.com
   domain	data.cchiwa.com
   domain	datasectioninfo.com
   domain	docs-verify.com
   domain	guest-mailclouds.com
   domain	helpdesk-mailservice.com
   domain	lion.waitnetwork.net
   domain	mail-drivecenter.com
   domain	mail-hostfile.com
   domain	mail.datasectioninfo.com
   domain	microsoft.ccivde.com
   domain	morning-place.com
   domain	ms0ffice.guest-mailclouds.com
   domain	netease.mail-drivecenter.com
   domain	netease.smartsystem36.com
   domain	oversea-cnki.net
   domain	service-hq.com
   domain	smartsystem36.com
   domain	waitnetwork.net
   ipv4	88.150.227.110:13
   url	http://193.9.113.180
   url	http://62.112.8.79

   copy batch

2. 2022-01-13 3 domain, 3 ipv4, 3 url4 yrs ago

   mp.weixin.qq.com/s/WBpML3BTxFPHmBgyunmEEA (Chinese) · otx.alienvault.com/pulse/61811ddc259f23fdd630e196

   domain	common.js.ftp.sh
   domain	hao.360.mooo.com
   domain	itoxtlthpw.com
   ipv4	37.120.140.233:65505
   ipv4	62.112.8.79:13
   ipv4	66.70.220.100:25
   url	http://190.2.147.128
   url	http://88.150.227.110
   url	http://89.38.99.11

   copy batch

3. 2022-01-13 2 url_path4 yrs ago

   twitter.com/Timele9527/status/1549950577349496832 · mp-weixin-qq-com.translate.goog/s/jX8D8d-4q46pKHS0AIVgjw?_x_tr_sl=zh-CN…

   /cloud/360log/safemon.php

   /sangfor/cloud/edrTL.php

   copy batch

Further reading 4

• otx.alienvault.com/pulse/61811ddc259f23fdd630e196
• mp-weixin-qq-com.translate.goog/s/jX8D8d-4q46pKHS0AIVgjw?_x_tr_sl=zh-CN…
• mp.weixin.qq.com/s/WBpML3BTxFPHmBgyunmEEA (Chinese)
• twitter.com/Timele9527/status/1549950577349496832