Threat Group Assessment: Muddled Libra
Tags
country: Japan Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Confluence - T1213.001 Credentials - T1589.001 Dcsync - T1003.006 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Phishing - T1660 Phishing - T1566 Remote Desktop Protocol - T1021.001 Sharepoint - T1213.002 Sms Messages - T1636.004 Software - T1592.002 Ssh - T1021.004 Tool - T1588.002 Browser Extensions - T1176 Connection Proxy - T1090 Remote Desktop Protocol - T1076
Show in Graph
Common Information
Type Value
UUID 8627a8e9-5407-4d19-a994-6a901cff15d6
Fingerprint f4190c199843c78f
Analysis status DONE
Considered CTI value 0
Text language
Published June 21, 2023, 1 p.m.
Added to db Aug. 13, 2023, 1:48 a.m.
Last updated Nov. 17, 2024, 6:53 p.m.
Headline Threat Group Assessment: Muddled Libra
Title Threat Group Assessment: Muddled Libra
Detected Hints/Tags/Attributes 118/3/31
Source URLs
Redirection Url
Details Source https://unit42.paloaltonetworks.com/muddled-libra/
URL Provider
Details Provider Source level domain
Details paloaltonetworks.com unit42.paloaltonetworks.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 120 ✔ Unit 42 https://feeds.feedburner.com/Unit42 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 3 
put.io
Details Domain 71 
transfer.sh
Details Domain 1 
wasabi.com
Details Domain 26 
gofile.io
Details IPv4 1 
104.247.82.11
Details IPv4 1 
105.101.56.49
Details IPv4 1 
105.158.12.236
Details IPv4 1 
134.209.48.68
Details IPv4 1 
137.220.61.53
Details IPv4 2 
138.68.27.0
Details IPv4 3 
146.190.44.66
Details IPv4 1 
149.28.125.96
Details IPv4 1 
157.245.4.113
Details IPv4 2 
159.223.208.47
Details IPv4 1 
159.223.238.0
Details IPv4 1 
162.19.135.215
Details IPv4 1 
164.92.234.104
Details IPv4 1 
165.22.201.77
Details IPv4 3 
167.99.221.10
Details IPv4 1 
172.96.11.245
Details IPv4 5 
185.56.80.28
Details IPv4 1 
188.166.92.55
Details IPv4 1 
193.149.129.177
Details IPv4 1 
207.148.0.54
Details IPv4 1 
213.226.123.104
Details IPv4 3 
35.175.153.217
Details IPv4 1 
45.156.85.140
Details IPv4 1 
45.32.221.250
Details IPv4 1 
64.227.30.114
Details IPv4 1 
79.137.196.160
Details IPv4 1 
92.99.114.231