When the hackers get hacked pt2
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Credentials - T1589.001 Email Addresses - T1589.002 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 7a780fbf-5518-4df6-b2f9-50e0e4c32a04
Fingerprint a45702dba62380ef
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 23, 2020, midnight
Added to db Dec. 19, 2024, 10:33 p.m.
Last updated Dec. 24, 2024, 12:05 a.m.
Headline When the hackers get hacked
Title When the hackers get hacked pt2
Detected Hints/Tags/Attributes 88/2/127
Source URLs
Redirection Url
Details Source https://northwave-cybersecurity.com/threat-intel-research/when-the-hackers-get-hacked-pt2
URL Provider
Details Provider Source level domain
Details northwave-cybersecurity.com northwave-cybersecurity.com
Attributes
Details Type #Events CTI Value
Details Domain 419 
protonmail.com
Details Domain 306 
yahoo.com
Details Domain 35 
exploit.im
Details Domain 176 
tutanota.com
Details Domain 1 
tssssss.info
Details Domain 1 
germanvps.com
Details Domain 1 
www.vpsroom.com
Details Domain 1 
cryptoho.st
Details Domain 1 
www.centohost.com
Details Domain 1 
profitserver.ru
Details Domain 1 
indovirtue.com
Details Domain 3 
dmzhost.co
Details Domain 11 
jabber.ru
Details Domain 17 
habr.com
Details Domain 4709 
github.com
Details Domain 1294 
gmail.com
Details Domain 1 
server.ekmanqroup.com
Details Domain 1 
server49.com
Details Domain 1 
irate.joystell.com
Details Domain 1 
enemysky.com
Details Domain 1 
ip28.ip-51-89-125.eu
Details Domain 1 
107-174-192-219-host.colocrossing.com
Details Domain 1 
ec2-18-188-194-80.us-east-2.compute.amazonaws.com
Details Domain 1 
ns4.1xxxhost.net
Details Domain 1 
host-for.net
Details Domain 1 
my.flaunt7.com
Details Domain 1 
deinserverhost.de
Details Domain 1 
hostmaze.com
Details Domain 1 
www.veeble.org
Details Domain 134 
blockchain.info
Details Domain 5 
www.investing.com
Details Domain 3 
share.vx-underground.org
Details Domain 214 
krebsonsecurity.com
Details Domain 10 
noticeofpleadings.com
Details Domain 1492 
twitter.com
Details Domain 3 
continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion
Details Email 1 
dorothystewartkapq@yahoo.com
Details Email 1 
hardenkidd49@yahoo.com
Details Email 1 
hennemanfern4@yahoo.com
Details Email 1 
goldcoin@exploit.im
Details Email 1 
nodex08@tutanota.com
Details Email 1 
dictyna@tssssss.info
Details Email 1 
vakomsyurebf@yahoo.com
Details Email 1 
kasazhtiklon@yahoo.com
Details Email 1 
chaadlinonzh@yahoo.com
Details Email 1 
schatodalsaz@yahoo.com
Details Email 1 
begemot_sun@jabber.ru
Details Email 1 
loguntsov@gmail.com
Details File 2 
2020.7z
Details File 1 
2022.7z
Details File 27 
1.tar
Details File 1 
gi11.dll
Details File 1 
da11.dll
Details File 1 
gi6.dll
Details File 1 
tssssss.inf
Details File 2 
redcar.png
Details File 2 
cursor.png
Details File 2 
imgpaper.png
Details File 1 
shortwave.png
Details File 1 
longrip.png
Details File 1 
green.png
Details File 135 
blockchain.inf
Details File 16 
order.pdf
Details Github username 2 
northwavesecurity
Details IPv4 1 
62.108.35.164
Details IPv4 1 
185.234.72.94
Details IPv4 1 
51.89.163.33
Details IPv4 2 
107.155.137.28
Details IPv4 1 
194.5.249.248
Details IPv4 1 
195.123.241.136
Details IPv4 1 
185.99.2.179
Details IPv4 1 
5.182.211.25
Details IPv4 1 
195.123.241.49
Details IPv4 1 
85.204.116.213
Details IPv4 3 
104.161.32.118
Details IPv4 1 
88.150.180.33
Details IPv4 1 
45.148.10.143
Details IPv4 1 
173.232.146.236
Details IPv4 2 
82.146.37.128
Details IPv4 1 
173.232.146.199
Details IPv4 1577 
127.0.0.1
Details IPv4 1 
212.129.41.246
Details IPv4 2 
31.214.240.203
Details IPv4 1 
51.89.125.28
Details IPv4 2 
107.174.192.219
Details IPv4 1 
18.188.194.80
Details IPv4 1 
162.244.81.87
Details IPv4 1 
94.140.115.219
Details IPv4 3 
104.161.32.109
Details IPv4 1 
66.70.218.46
Details IPv4 1 
204.155.31.175
Details Url 1 
https://germanvps.com
Details Url 1 
https://๐‘‘๐‘’๐‘–๐‘›๐‘ ๐‘’๐‘Ÿ๐‘ฃ๐‘’๐‘Ÿโ„Ž๐‘œ๐‘ ๐‘ก.๐‘‘๐‘’
Details Url 1 
https://www.vpsroom.com
Details Url 1 
https://cryptoho.st
Details Url 1 
https://โ„Ž๐‘œ๐‘ ๐‘กโˆ’๐‘“๐‘œ๐‘Ÿ.๐‘›๐‘’๐‘ก
Details Url 1 
https://www.centohost.com
Details Url 1 
https://๐‘š๐‘ฆ.๐‘“๐‘™๐‘Ž๐‘ข๐‘›๐‘ก7.๐‘๐‘œ๐‘š
Details Url 1 
https://profitserver.ru
Details Url 1 
https://โ„Ž๐‘œ๐‘ ๐‘ก๐‘š๐‘Ž๐‘ง๐‘’.๐‘๐‘œ๐‘š
Details Url 1 
https://indovirtue.com
Details Url 1 
https://๐‘ค๐‘ค๐‘ค.๐‘ฃ๐‘’๐‘’๐‘๐‘™๐‘’.๐‘œ๐‘Ÿ๐‘”
Details Url 1 
https://dmzhost.co
Details Url 1 
http://107.174.192.219/images/redcar.png
Details Url 1 
http://107.174.192.219/images/cursor.png
Details Url 1 
http://107.174.192.219/images/imgpaper.png
Details Url 1 
http://104.161.32.109/images/shortwave.png
Details Url 1 
http://104.161.32.109/images/longrip.png
Details Url 1 
http://104.161.32.109/images/green.png
Details Url 1 
http://66.70.218.46/images/redcar.png
Details Url 1 
http://66.70.218.46/images/cursor.png
Details Url 1 
http://66.70.218.46/images/imgpaper.png
Details Url 1 
http://204.155.31.175/images/imgpaper.png
Details Url 1 
https://host-for.net
Details Url 1 
https://my.flaunt7.com
Details Url 1 
https://deinserverhost.de
Details Url 1 
https://hostmaze.com
Details Url 1 
https://www.veeble.org
Details Url 23 
https://blockchain.info
Details Url 1 
https://www.investing.com/crypto/bitcoin/historical-data
Details Url 2 
https://northwave-security.com/when-the-hackers-get-hacked-part-1-a-blog-series-unveiling-the-conti-ransomware-family
Details Url 1 
https://github.com/northwavesecurity/complete_translation_leaked_chats_conti_ransomware
Details Url 3 
https://share.vx-underground.org/conti
Details Url 2 
https://krebsonsecurity.com/2022/03/conti-ransomware-group-diaries-part-i-evasion
Details Url 1 
https://noticeofpleadings.com/trickbot/files/defaultjudgment/2021.05.21
Details Url 1 
https://twitter.com/trickleaks/status/1499740068281475073
Details Url 2 
http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion