XPATH

Overview 7 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

Principal sources 2 reports

Ranked by how many of this actor's indicators each report brought in.

• 7news.drweb.com/show/?lng=en&p=0&i=13907&c=0
• 7github.com/DoctorWebLtd/malware-iocs/blob/master/A…

Related groups 4

What the sources have in common — not a claim that these are the same actor. See the whole graph.

• CALYPSO
  2 shared indicators
• APT41 G0096
  1 shared indicator
• ICEFOG
  1 shared indicator
• REDFOXTROT
  1 shared indicator

Timeline 7 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.

1. 2020-07-20 4 domain6 yrs ago

   news.drweb.com/show/?lng=en&p=0&i=13907&c=0 · github.com/DoctorWebLtd/malware-iocs/blob/master/A…

   dns03.cainformations.com

   kkkfaster.jumpingcrab.com

   pneword.net

   v.nnncity.xyz

   copy batch

2. 2019-10-31 2 domain7 yrs ago

   news.drweb.com/show/?lng=en&p=0&i=13907&c=0 · github.com/DoctorWebLtd/malware-iocs/blob/master/A…

   sultris.com

   tv.teldcomtv.com

   copy batch

3. 2019-06-04 1 domain7 yrs ago

   news.drweb.com/show/?lng=en&p=0&i=13907&c=0 · github.com/DoctorWebLtd/malware-iocs/blob/master/A…

   nicodonald.accesscam.org

   copy batch

Further reading 2

• news.drweb.com/show/?lng=en&p=0&i=13907&c=0
• github.com/DoctorWebLtd/malware-iocs/blob/master/A…