Threat Spotlight: Upatre - Say No to Drones, Say Yes to Malware
Tags
country: United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Email Addresses - T1589.002 Ip Addresses - T1590.005 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Non-Standard Port - T1509 Non-Standard Port - T1571 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID 1cd59c37-d6dd-4d72-91e6-f624bda27b18
Fingerprint 2c1d09db513c82d1
Analysis status DONE
Considered CTI value 2
Text language
Published April 19, 2015, 11:05 p.m.
Added to db Oct. 9, 2022, 4:16 p.m.
Last updated Sept. 24, 2024, 12:30 a.m.
Headline Vulnerability Information
Title Threat Spotlight: Upatre - Say No to Drones, Say Yes to Malware
Detected Hints/Tags/Attributes 55/3/45
Source URLs
Redirection Url
Details Source https://blog.talosintelligence.com/2015/04/threat-spotlight-upatre-say-no-to.html
URL Provider
Details Provider Source level domain
Details talosintelligence.com blog.talosintelligence.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
energy-solutions.co.uk
Details Domain 1 
bewiser.co.uk
Details Domain 1 
damagt.com
Details Domain 47 
checkip.dyndns.org
Details Domain 62 
icanhazip.com
Details Domain 1 
hbanela.com
Details Domain 1 
hermanosalvarez.com
Details Domain 1 
hitachimriservice.com
Details Domain 1 
hodramoua.org
Details Domain 1 
host2fast.ro
Details Domain 1 
howtodealwith-depression.com
Details Domain 1 
imoveisemribeiraopretosp.com.br
Details Email 1 
mark.kemsley@energy-solutions.co.uk
Details Email 1 
sales@bewiser.co.uk
Details Email 1 
mike.l.longo@damagt.com
Details sha256 1 
4fe85509bb6a87dbf04aa114c5523b183f995a6820f424871df29bca64ad7ecc
Details sha256 1 
97a49c638abbb640f651f4d7970a4fc316eb3b836c205feb67b8da9df9b68e89
Details sha256 1 
8b4a6ee16088605264a35d490aee12789c6df94f391690c1aca4022528486592
Details IPv4 1 
106.187.40.118
Details IPv4 1 
173.227.247.30
Details IPv4 1 
176.106.142.52
Details IPv4 1 
176.106.121.140
Details IPv4 1 
176.223.122.103
Details IPv4 1 
188.123.37.229
Details IPv4 1 
188.124.211.142
Details IPv4 1 
198.41.214.183
Details IPv4 1 
199.21.148.88
Details IPv4 1 
210.59.185.3
Details IPv4 1 
217.12.59.234
Details IPv4 1 
220.130.123.138
Details IPv4 1 
220.229.230.132
Details IPv4 1 
220.229.230.35
Details IPv4 1 
220.229.230.81
Details IPv4 1 
220.229.230.86
Details IPv4 1 
220.229.230.87
Details IPv4 1 
223.26.70.33
Details IPv4 2 
5.141.22.43
Details IPv4 1 
50.58.123.11
Details IPv4 1 
60.199.230.126
Details IPv4 1 
72.22.155.158
Details IPv4 1 
78.157.227.34
Details IPv4 1 
83.219.139.124
Details IPv4 1 
83.239.125.206
Details IPv4 1 
85.248.2.228
Details IPv4 1 
91.212.221.5