Rewterz Threat Alert – North Korea Linked Konni APT Group – Active IOCs
Tags
| country: | North Korea South Korea Russia United States Of America |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Data Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Software - T1592.002 Vulnerabilities - T1588.006 |
Common Information
| Type | Value |
|---|---|
| UUID | 2417af3f-4937-44ef-9e9a-78f315d9cd47 |
| Fingerprint | 66a82d918f45cd0c |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | July 31, 2023, 7:23 a.m. |
| Added to db | Aug. 7, 2023, 9:33 a.m. |
| Last updated | Dec. 20, 2024, 2:52 p.m. |
| Headline | Rewterz Threat Alert – North Korea Linked Konni APT Group – Active IOCs |
| Title | Rewterz Threat Alert – North Korea Linked Konni APT Group – Active IOCs |
| Detected Hints/Tags/Attributes | 52/3/34 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 365 | ✔ | — | https://www.rewterz.com/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | naver.drive001.com |
|
| Details | Domain | 2 | naver.down001.com |
|
| Details | Domain | 1 | naver.files001.com |
|
| Details | Domain | 2 | naver.down-files.com |
|
| Details | Domain | 1 | naver.cloudfiles001.com |
|
| Details | Domain | 1 | naver.cachecast001.com |
|
| Details | Domain | 1 | naver.bigfile020.com |
|
| Details | Domain | 2 | drvcast.com |
|
| Details | Domain | 1 | drvism.com |
|
| Details | Domain | 1 | breezyhost.net |
|
| Details | Domain | 3 | centhosting.net |
|
| Details | Domain | 1 | overseeby.com |
|
| Details | Domain | 1 | elinline.com |
|
| Details | Domain | 2 | expressionkey.com |
|
| Details | Domain | 1 | headsity.com |
|
| Details | Domain | 1 | donew-order.com |
|
| Details | Domain | 1 | wintop-rus.com |
|
| Details | Domain | 3 | filecompact.com |
|
| Details | Domain | 2 | naver.filetodownload.com |
|
| Details | Domain | 2 | the-fast-file.com |
|
| Details | Domain | 2 | naver.filedowns.net |
|
| Details | Domain | 1 | manage-box.com |
|
| Details | Domain | 1 | safemaners.com |
|
| Details | Domain | 3 | fastfilestore.com |
|
| Details | Domain | 1 | filedownloaders.com |
|
| Details | Domain | 1 | senteroman.com |
|
| Details | Domain | 3 | view-naver.com |
|
| Details | Domain | 5 | resulview.com |
|
| Details | Domain | 1 | mallesr.com |
|
| Details | Domain | 1 | nottingham39483.com |
|
| Details | Domain | 1 | cachecast001.com |
|
| Details | md5 | 1 | d668a24ca81e99750fc0808dec51f69e |
|
| Details | sha1 | 1 | 1d185b491eaf7e2c373c62a91ba20c47ef7ed488 |
|
| Details | sha256 | 1 | 1990263f41702ce40a3de5081f9b35f7bf85136e8b90b5f171ad6c1f3966ffa7 |