OilAlpha: A Likely Pro-Houthi Group Targeting Entities Across the Arabian Peninsula
Common Information
| Type | Value |
|---|---|
| UUID | d140f3f7-7135-461e-b260-b71ed3998dce |
| Fingerprint | c30534c61cb5be30f53d36f09f5f82cd5c5cc34e0e0fea64d4486b1d6fb59f09 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | May 15, 2023, 3:36 p.m. |
| Added to db | March 10, 2024, 1:16 a.m. |
| Last updated | Aug. 31, 2024, 2:39 a.m. |
| Headline | OilAlpha: A Likely Pro-Houthi Group Targeting Entities Across the Arabian Peninsula |
| Title | OilAlpha: A Likely Pro-Houthi Group Targeting Entities Across the Arabian Peninsula |
| Detected Hints/Tags/Attributes | 141/4/109 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://go.recordedfuture.com/hubfs/reports/cta-2023-0516.pdf |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Autonomous System Number | 2 | AS30873 |
|
| Details | Autonomous System Number | 4 | AS29075 |
|
| Details | Domain | 546 | www.recordedfuture.com |
|
| Details | Domain | 1 | 87524uyre.ddns.net |
|
| Details | Domain | 1 | mylab123321hm.ddns.net |
|
| Details | Domain | 2 | 77112hilan.ddns.net |
|
| Details | Domain | 2 | antahomaar2022.ddns.net |
|
| Details | Domain | 1 | manyouhomaar21.ddns.net |
|
| Details | Domain | 1 | ndf236fgh4367h.ddns.net |
|
| Details | Domain | 1 | 7687ytuyt78gfg.ddns.net |
|
| Details | Domain | 1 | 2u.pw |
|
| Details | Domain | 317 | bit.ly |
|
| Details | Domain | 1 | goman239.ddns.net |
|
| Details | Domain | 1 | info.nrc.jo |
|
| Details | Domain | 1 | 6386hgdsjg8172.ddns.net |
|
| Details | Domain | 1 | mylab123321hm.ddn.net |
|
| Details | Domain | 1 | hilan77112.ddns.net |
|
| Details | Domain | 1 | musicmatrix.access.ly |
|
| Details | Domain | 1 | magtimego.servegame.com |
|
| Details | Domain | 1 | djhgurjhwdskh72532.ddns.me |
|
| Details | Domain | 1 | akjdaks54678sdas.ddns.net |
|
| Details | Domain | 1 | dhgrshghjrsg0092102.ddns.net |
|
| Details | Domain | 1 | hsdg763276jgkjx.ddns.net |
|
| Details | Domain | 1 | hm712175206zh.ddns.net |
|
| Details | Domain | 1 | yemenofoneofline.ddns.net |
|
| Details | Domain | 1 | 712175206totot.ddns.net |
|
| Details | Domain | 1 | fackyouman123456789.ddns.net |
|
| Details | Domain | 1 | 2020anekafkark2020.ddns.net |
|
| Details | Domain | 1 | ncbyemen2008.ddns.net |
|
| Details | Domain | 1 | you7788mtnq.ddns.net |
|
| Details | Domain | 1 | saudigazette2022yemen.ddns.net |
|
| Details | Domain | 1 | bobkkfoundationyemen2022.ddns.net |
|
| Details | Domain | 1 | moonname2022.ddns.net |
|
| Details | Domain | 1 | saaoff33993homhl.ddns.net |
|
| Details | Domain | 1 | hsgdjh78632.mypsx.net |
|
| Details | Domain | 1 | bobm1jgjahsg81.ddns.net |
|
| Details | Domain | 1 | hjsdg2368gskambv.ddns.net |
|
| Details | Domain | 2 | gomnd2873yemnenrc.ddns.net |
|
| Details | Domain | 1 | abas1.ddns.net |
|
| Details | Domain | 265 | recordedfuture.com |
|
| Details | File | 1 | yemenofksa.apk |
|
| Details | File | 7 | whatsapp.apk |
|
| Details | File | 1 | unicef.apk |
|
| Details | File | 1 | unjobs.apk |
|
| Details | File | 1 | ksa-yemen.apk |
|
| Details | File | 1 | es.apk |
|
| Details | File | 1 | hm.apk |
|
| Details | File | 1 | yon.exe |
|
| Details | File | 1 | stupdate.exe |
|
| Details | File | 69 | client.exe |
|
| Details | File | 3 | gi.exe |
|
| Details | sha256 | 1 | ad990791d595c149f6770d08be6411b88f9dab2ed56bf61fd274bea2327f17c3 |
|
| Details | sha256 | 1 | fb6b8cdca2b35c5c0174e1e44b562f73194d9e0e79181fe4e312503b2ce801ec |
|
| Details | sha256 | 1 | b0653d049b3e0cadf4a198e3063b0025dd1fdaee70ac3a03b34c248a7dd89890 |
|
| Details | sha256 | 1 | 1f1cdd9acd9e581f538bdefc1ec5f0aebcc57cfccf5a4a9389f35c8741242e32 |
|
| Details | sha256 | 1 | 92420eb9356e103864ba5edcffe98d6a5ecfe13f7580035202dea1a32739b256 |
|
| Details | sha256 | 1 | 8bcc816a517ecdb72e6f97c53c4e40da8d96ebae239eb7f760c29bd943d1b722 |
|
| Details | sha256 | 1 | b0c54756dd5c53d13be190952fe63c1b9e1989f8673ab549d19035207f01d901 |
|
| Details | sha256 | 1 | 8846b72ed2ecde60b805cfaf5d1f71e34742a18177ff3c4d8d5b9c3f250e153d |
|
| Details | sha256 | 1 | 2b7d2490bfc4eacd3e5870ae0de92fdb5c1f11a5e8fdc7c07773780c6db038d9 |
|
| Details | sha256 | 1 | 8d07dc0745e57aeb40905a7426fb6515930a1fc7898db0ee93fda55ba085461b |
|
| Details | sha256 | 1 | 7e6ec9df5e2218b5ad4111059f799e1348c06f98cb0f0742f86aae1875c6fd13 |
|
| Details | sha256 | 1 | eb8edfd04c0d1e0b03f4629519800c8b043110dbe94a70406c60d5a009f723fe |
|
| Details | sha256 | 1 | 105d0533e48a7cdda29111f20818958f2d07e7ea0d7d323e59739703e61186c2 |
|
| Details | sha256 | 1 | f3f3764ee6a0e5b933e95040092e0b348f672aaab273cf8eaaeabca28be5da36 |
|
| Details | sha256 | 2 | 7d21d3dce90408ca530c5e2364495d4f0932cdd23d812e4714e3665c06bfc560 |
|
| Details | sha256 | 1 | 2c2393a061901e13b9fc038bb25ba666fbff25d304c6dec51bac10a46dbd1fe6 |
|
| Details | sha256 | 1 | 48e4533ff3e121fd5e3a514206d3bfdde621d800d319dc7d157041aba06b8399 |
|
| Details | sha256 | 1 | 2028ede216c0cbf803d2d2e07415d0dd44c9d495ed9a3c63ec6645a770ad5443 |
|
| Details | sha256 | 1 | fbd8551a74d6a7674dcea72fc8eea717c8cb932a22a715360554a91490bdfd6f |
|
| Details | sha256 | 1 | 41d76e2a672d2815f1dc1ca43f2a716dd4c3f51afad7da1718deadddd52ad5a1 |
|
| Details | sha256 | 1 | 7959471cc0e0e4d7799e2544cd5db455d6bc892e9c2cb680c8a09879a4177222 |
|
| Details | IPv4 | 1 | 134.35.15.220 |
|
| Details | IPv4 | 1 | 134.35.130.126 |
|
| Details | IPv4 | 1 | 134.35.0.119 |
|
| Details | IPv4 | 1 | 134.35.11.141 |
|
| Details | IPv4 | 1 | 109.200.165.170 |
|
| Details | IPv4 | 1 | 134.35.11.130 |
|
| Details | IPv4 | 1 | 134.35.2.7 |
|
| Details | IPv4 | 1 | 134.35.1.116 |
|
| Details | IPv4 | 1 | 134.35.217.64 |
|
| Details | IPv4 | 1 | 134.35.10.166 |
|
| Details | IPv4 | 1 | 134.35.2.3 |
|
| Details | IPv4 | 1 | 134.35.10.61 |
|
| Details | IPv4 | 1 | 134.35.11.92 |
|
| Details | IPv4 | 1 | 134.35.6.69 |
|
| Details | IPv4 | 1 | 134.35.11.48 |
|
| Details | IPv4 | 1 | 134.35.14.204 |
|
| Details | IPv4 | 1 | 134.35.2.254 |
|
| Details | IPv4 | 1 | 134.35.6.170 |
|
| Details | IPv4 | 1 | 134.35.0.0 |
|
| Details | IPv4 | 1 | 109.200.160.0 |
|
| Details | IPv4 | 1 | 175.110.0.0 |
|
| Details | IPv4 | 1 | 91.109.176.0 |
|
| Details | MITRE ATT&CK Techniques | 409 | T1566 |
|
| Details | MITRE ATT&CK Techniques | 16 | T1402 |
|
| Details | MITRE ATT&CK Techniques | 7 | T1447 |
|
| Details | MITRE ATT&CK Techniques | 14 | T1412 |
|
| Details | MITRE ATT&CK Techniques | 21 | T1430 |
|
| Details | MITRE ATT&CK Techniques | 16 | T1420 |
|
| Details | MITRE ATT&CK Techniques | 5 | T1421 |
|
| Details | MITRE ATT&CK Techniques | 13 | T1422 |
|
| Details | MITRE ATT&CK Techniques | 89 | T1114 |
|
| Details | MITRE ATT&CK Techniques | 22 | T1429 |
|
| Details | MITRE ATT&CK Techniques | 9 | T1433 |
|
| Details | MITRE ATT&CK Techniques | 163 | T1573 |
|
| Details | MITRE ATT&CK Techniques | 492 | T1105 |
|
| Details | Threat Actor Identifier by Recorded Future | 4 | TAG-41 |
|
| Details | Threat Actor Identifier by Recorded Future | 3 | TAG-62 |