Water Makara Campaign IOCs - SEC-1275-1
Tags
| attack-pattern: | Javascript - T1059.007 Mshta - T1218.005 Mshta - T1170 |
Common Information
| Type | Value |
|---|---|
| UUID | 22030c72-d836-47c9-b362-f5ef0a9aee49 |
| Fingerprint | fa994fab9a26c289 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Oct. 15, 2024, midnight |
| Added to db | Oct. 15, 2024, 7:49 a.m. |
| Last updated | Nov. 17, 2024, 6:54 p.m. |
| Headline | Water Makara Campaign IOCs |
| Title | Water Makara Campaign IOCs - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 9/1/80 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://1275.ru/ioc/4115/water-makara-campaign-iocs/?mtm_campaign=rss |
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | annotmykim.gruposenhordobonfim.io |
|
| Details | Domain | 1 | blogonbel84.gruposenhordobonfim.org |
|
| Details | Domain | 1 | blogonben.gruposenhordobonfim.org |
|
| Details | Domain | 1 | blogonben8.gruposenhordobonfim.org |
|
| Details | Domain | 1 | bruconlincol587.luminisconsultoria.io |
|
| Details | Domain | 1 | bruncolinc59.lumiscoconsupoltronsia.org |
|
| Details | Domain | 1 | claronqual.gruposenhordobonfim.org |
|
| Details | Domain | 1 | clindnor.cenithbonfim.net |
|
| Details | Domain | 1 | crafer.grupobonfim.net |
|
| Details | Domain | 1 | crecil.gruposenhordobonfim.org |
|
| Details | Domain | 1 | crgricill.gruposenhordobonfim.net |
|
| Details | Domain | 1 | crigonval.gruposenhordobonfim.org |
|
| Details | Domain | 1 | crigoval.gruposenhordobonfim.org |
|
| Details | Domain | 1 | crigvalbon.gruposenhordobonfim.org |
|
| Details | Domain | 1 | dragounzolonoff.ceritbonfim.com |
|
| Details | Domain | 1 | dramainco54.groupomonflowsacodonbonsait.io |
|
| Details | Domain | 1 | drapunzol.cemiteriobonfim.com |
|
| Details | Domain | 1 | drocannanbel.veritasinvest.io |
|
| Details | Domain | 1 | florvaz.cemisionfinanceinvest.com |
|
| Details | Domain | 1 | flovaz138.cemiteriobonfim.com |
|
| Details | Domain | 1 | frulinzol.grupobonfim.org |
|
| Details | Domain | 1 | gaminqual.soluclaoled.world |
|
| Details | Domain | 1 | gramdinlhar.grupobonfim.org |
|
| Details | Domain | 1 | graminqual.solucaoled.world |
|
| Details | Domain | 1 | grammidhal.gruposenhordobonfim.org |
|
| Details | Domain | 1 | htruriz.grupobonfim.net |
|
| Details | Domain | 1 | murankel.limpanzin.io |
|
| Details | Domain | 1 | plaminel516.gruposenhordobonfim.com |
|
| Details | Domain | 1 | planhal.grupobonfim.org |
|
| Details | Domain | 1 | planhalconnalminsenior.io |
|
| Details | Domain | 1 | plarandiz.gruposenhordobonfim.org |
|
| Details | Domain | 1 | plikinvintez371.gruposenhordobonfim.com |
|
| Details | Domain | 1 | plikkentin37h.gruposenhordobonfim.com |
|
| Details | Domain | 1 | prawinvinbil2.clienteasciendig.world |
|
| Details | Domain | 1 | prawinzinbil66.clienteasciendig.world |
|
| Details | Domain | 1 | prawinzinbil66.clienteascindig.world |
|
| Details | Domain | 1 | pregonfer.gruposenhordobonfim.com |
|
| Details | Domain | 1 | prehenninlhar.gruposenhordobonfim.org |
|
| Details | Domain | 1 | prenharbisonvirenanal3.plurianbonfim.net |
|
| Details | Domain | 1 | prenherninal6v.gruposenhordobonfim.com |
|
| Details | Domain | 1 | prepor854.grupobonfim.net |
|
| Details | Domain | 1 | prerherningbron38.grupatibonfim.net |
|
| Details | Domain | 1 | prisonfinfel.grupobonfim.org |
|
| Details | Domain | 2 | pritonggopatrimoniosoberano.world |
|
| Details | Domain | 2 | pritongongor.patrimoniosoberano.world |
|
| Details | Domain | 1 | rawinzinbil66.clienteascindig.world |
|
| Details | Domain | 1 | rigonval.gruposenhordobonfim.org |
|
| Details | Domain | 1 | sasanal.gruposenhordobonfim.org |
|
| Details | Domain | 1 | scropenpaz.subindometa.world |
|
| Details | Domain | 1 | sp.runal.pad.rimonios.oberano.world |
|
| Details | Domain | 2 | sprunal.patrimoniosoberano.world |
|
| Details | Domain | 2 | spunalu.patrimoniosoberano.world |
|
| Details | Domain | 1 | stragir.nexuspatrimonial.city |
|
| Details | Domain | 1 | stragiran48xpatrimonianal.city |
|
| Details | Domain | 1 | stredenpintal7.sistemapreparatorio.io |
|
| Details | Domain | 1 | stredential7.sistemaaproparatorio.io |
|
| Details | Domain | 1 | stredential7.sistemapreparatorio.io |
|
| Details | Domain | 1 | strehen78zinal.islandofinvolomartyreasurgical.io |
|
| Details | Domain | 1 | strehensinvel.jlldobrasil.world |
|
| Details | Domain | 1 | stresanal.gruposenhordobonfim.com |
|
| Details | Domain | 1 | tibilaniznale7.intyoberbonfim.net |
|
| Details | Domain | 1 | titblansuperioniank3.cenithbonfim.net |
|
| Details | Domain | 1 | tribenpantrimonianal.cfdauctions.org |
|
| Details | Domain | 1 | tripanroncol68.aberturaazulvision.xyz |
|
| Details | Domain | 1 | tritanpinvaz.nexuspatrimonial.city |
|
| Details | Domain | 1 | tritum.gruposenhordobonfim.org |
|
| Details | Domain | 1 | trubenpal.paineira.cfd |
|
| Details | Domain | 1 | trugomen.copinasultanbolimansire.io |
|
| Details | Domain | 1 | trugonmennil.luminisconsultoria.io |
|
| Details | Domain | 1 | trujanel.gruposenhordobonfim.net |
|
| Details | Domain | 1 | urnasinvest.yunusgroup.net |
|
| Details | Domain | 1 | valcredonlin59.unicicomonsultanlonko.org |
|
| Details | Domain | 1 | valentinvest37.patrickbonfim.net |
|
| Details | Domain | 1 | vaval.gruposenhordobonfim.net |
|
| Details | Domain | 1 | velvinet6.unovetsnahels.org |
|
| Details | Domain | 1 | veritasinvestio.io |
|
| Details | Domain | 1 | vinherena.sonyofbonfim.net |
|
| Details | File | 456 | mshta.exe |
|
| Details | File | 1 | dragounzolonoff.cer |
|
| Details | File | 1 | prenharbisonvirenanal3.pl |