Earth Kasha (APT10) APT IOCs - SEC-1275-1
Tags
| attack-pattern: | Domains - T1583.001 Domains - T1584.001 |
Common Information
| Type | Value |
|---|---|
| UUID | c0ba60e9-5ab2-4084-8f58-e61338f53358 |
| Fingerprint | b715e022729add0b |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Nov. 20, 2024, midnight |
| Added to db | Nov. 20, 2024, 7:41 a.m. |
| Last updated | Dec. 13, 2024, 2:17 p.m. |
| Headline | Earth Kasha (APT10) APT IOCs |
| Title | Earth Kasha (APT10) APT IOCs - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 5/1/11 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://1275.ru/ioc/8083/earth-kasha-apt10-apt-iocs/?mtm_campaign=rss |
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 3 | gotdns.ch |
|
| Details | Domain | 24 | hopto.org |
|
| Details | Domain | 6 | myftp.org |
|
| Details | Domain | 2 | srmbr.com |
|
| Details | Domain | 2 | tw8sl.com |
|
| Details | Domain | 2 | ns1.tlsart.com |
|
| Details | sha256 | 2 | 8574a494425825958c1e978ca7f66a467954fa90c7c898eebac49928519f0eae |
|
| Details | sha256 | 2 | 87fd4cf002e4d3867462c7a08124cba154750ae78785009a9f213c7479241eef |
|
| Details | sha256 | 2 | 9c681493c81581995e6a48b96411a7004fe77558d7ca863e26398538ad78f385 |
|
| Details | IPv4 | 3 | 45.76.197.236 |
|
| Details | Threat Actor Identifier - APT | 291 | APT10 |