BlindEagle APT IOCs - SEC-1275-1
Tags
| attack-pattern: | Domains - T1583.001 Domains - T1584.001 Dynamic Dns - T1311 Dynamic Dns - T1333 |
Common Information
| Type | Value |
|---|---|
| UUID | 2c24500f-36c0-4112-95fe-96c6878f0d47 |
| Fingerprint | 3238d08e7817786e |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Sept. 16, 2024, midnight |
| Added to db | Sept. 16, 2024, 4:20 p.m. |
| Last updated | Nov. 17, 2024, 6:53 p.m. |
| Headline | BlindEagle APT IOCs |
| Title | BlindEagle APT IOCs - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 8/1/13 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://1275.ru/ioc/3921/blindeagle-apt-iocs/?mtm_campaign=rss |
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 4 | edificiobaldeares.linkpc.net |
|
| Details | Domain | 3 | equipo.linkpc.net |
|
| Details | Domain | 3 | perfect5.publicvm.com |
|
| Details | Domain | 3 | perfect8.publicvm.com |
|
| Details | Domain | 358 | pastebin.com |
|
| Details | File | 4 | perfect5.pub |
|
| Details | File | 4 | perfect8.pub |
|
| Details | md5 | 3 | b83f6c57aa04dab955fadcef6e1f4139 |
|
| Details | sha1 | 3 | a68cac786b47575a0d747282ace9a4c75e73504d |
|
| Details | sha256 | 3 | ec2dd6753e42f0e0b173a98f074aa41d2640390c163ae77999eb6c10ff7e2ebd |
|
| Details | Threat Actor Identifier - APT-C | 83 | APT-C-36 |
|
| Details | Threat Actor Identifier - APT-Q | 11 | APT-Q-98 |
|
| Details | Url | 2 | https://pastebin.com/raw/xafmb6xp |