Water Barghest APT IOCs - SEC-1275-1
Tags
| attack-pattern: | Domains - T1583.001 Domains - T1584.001 |
Common Information
| Type | Value |
|---|---|
| UUID | c2d1db45-ad98-4713-a5f7-0bfef7a90f58 |
| Fingerprint | 77a6bc9a58a3ce65 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Nov. 19, 2024, midnight |
| Added to db | Nov. 19, 2024, 7:08 a.m. |
| Last updated | Nov. 21, 2024, 7:20 a.m. |
| Headline | Water Barghest APT IOCs |
| Title | Water Barghest APT IOCs - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 4/1/242 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://1275.ru/ioc/8075/water-barghest-apt-iocs/?mtm_campaign=rss |
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 2 | antigutation.info |
|
| Details | Domain | 3 | antihicipate.com |
|
| Details | Domain | 1 | asdns.pp.ua |
|
| Details | Domain | 1 | asdns2.pp.ua |
|
| Details | Domain | 2 | disimunous.com |
|
| Details | Domain | 1 | dnslookip.com |
|
| Details | Domain | 3 | emelenalike.com |
|
| Details | Domain | 1 | enidecikive.net |
|
| Details | Domain | 4 | exagenafy.com |
|
| Details | Domain | 3 | inoluvary.com |
|
| Details | Domain | 3 | interocakate.com |
|
| Details | Domain | 1 | ipinfocheck.com |
|
| Details | Domain | 4 | ipscoredns.com |
|
| Details | Domain | 1 | ipwebinfo.net |
|
| Details | Domain | 2 | macrofocafify.org |
|
| Details | Domain | 3 | minixetepate.biz |
|
| Details | Domain | 4 | misukumotist.info |
|
| Details | Domain | 3 | monobimefist.com |
|
| Details | Domain | 4 | nslookups.com |
|
| Details | Domain | 3 | prekudinish.com |
|
| Details | Domain | 3 | prenurevaty.info |
|
| Details | Domain | 3 | promexucate.com |
|
| Details | Domain | 3 | recepatission.info |
|
| Details | Domain | 5 | remalexation.name |
|
| Details | Domain | 2 | semiridinution-postepudency.com |
|
| Details | Domain | 3 | subonuker.name |
|
| Details | Domain | 4 | ultradomafy.net |
|
| Details | Domain | 3 | underuvukent.com |
|
| Details | Domain | 1 | whosedns.pp.ua |
|
| Details | File | 2 | antigutation.inf |
|
| Details | File | 3 | misukumotist.inf |
|
| Details | File | 2 | prenurevaty.inf |
|
| Details | File | 2 | recepatission.inf |
|
| Details | sha256 | 1 | 05cd00f975bd2522d943e836ef5a1cb00806c6d684987274da850be348b2b1f4 |
|
| Details | sha256 | 1 | 129693d8c474a8de8f91e1d16e0129732aba20bea9ac24e7c68b345b7b05ad6f |
|
| Details | sha256 | 1 | 1748978997d9630c568f6c06ff0767ed8b0cfbf5c93612daf600adefecfba2e1 |
|
| Details | sha256 | 1 | 1fe1cece08fef19448a32a746f5c8f77521db757c2b345103834a5f617101f15 |
|
| Details | sha256 | 1 | 2bf2c10332f1d31e1b87e62ca2d7afc70f073c55474d7f03ff6c37caec28df4a |
|
| Details | sha256 | 1 | 2e940e3bd88226cfbbfb7a2eefbdd675173fd2950847a9131e11c1682353e286 |
|
| Details | sha256 | 1 | 35f95fbb1b439a89cbd6e825188fb64fde44aef9829d549b4f547850552e095c |
|
| Details | sha256 | 1 | 4af537b29c54f976801ee7688c4db78d4b4e7b9947769226afc108e4645cf20f |
|
| Details | sha256 | 1 | 4e8a36f467f1dab1b4768f67efd3712562699603839e38d93525c90989a4cf26 |
|
| Details | sha256 | 1 | 5353228926aa96b546b33de4418f15e347441d16d292f4946beca6a0d314e635 |
|
| Details | sha256 | 1 | 56657300f250fa9df77d6bc393bfc01d585d00bfb5302bf34314368fb13cbe26 |
|
| Details | sha256 | 1 | 5d89b09dfb7c09a3a42345a136293b469a71ef7a1f599102ad67c09dc4fc53bf |
|
| Details | sha256 | 1 | 600c56a175f3661f434d1fe3418fb4cca96cdf6f880bd74a389e0d16d85ca501 |
|
| Details | sha256 | 1 | 6a3288b1d326290778544769ea7c1ed80af763ea47fee5131afef209a0e2d301 |
|
| Details | sha256 | 1 | 710e0317de732f1bce32ed96d33468cb2b55e513106393b11bf7800081f1e681 |
|
| Details | sha256 | 1 | 743f7c495048d8983bbedc3d52ea00c914fe008b06ef01c1be2a78cd5c1375f3 |
|
| Details | sha256 | 1 | 74f4d77bf367063bccece2fb3796e6bd7a1f51528f58ed3f1450b7de6c29b5f4 |
|
| Details | sha256 | 1 | 78a1b5bea50034e7a03e6ed5c0f4f80f1fbc770555891a73790e1b59a2fba608 |
|
| Details | sha256 | 1 | 7bddb716c233211fa7332586e7d3e859814ec508108fa1024c4fb99aab843cdf |
|
| Details | sha256 | 1 | 83cf89428e07a1a10b22958dca25f50a8a151bccfa01ee9bcce870303a4f9861 |
|
| Details | sha256 | 1 | 869965781d96a06741c2a28c54bb8e3233bc10fcb92455e6cb9ab0c9fc2c54d4 |
|
| Details | sha256 | 1 | 892eb161254733cf5923313544e923fface375c27b3dcf8f66e79da84c93cf65 |
|
| Details | sha256 | 1 | 97cadc2eba1eaa7a4115ea7cc82a6955bc69d8e2913b0b46f493f9cc84ec07de |
|
| Details | sha256 | 1 | 9cb6c49173e4cb5a0b3c2f6d69a5bdc0bc67138329f00afaf38d678f2c0e00a6 |
|
| Details | sha256 | 1 | 9f1fcfb2fcc66f4e534d3348b8d01eef0be1b153bc022ae7601ed3a0817aae88 |
|
| Details | sha256 | 1 | 9fb33a16762dce934e7a48946e396ad672ab16d42a060021238f2ddf6a9f0514 |
|
| Details | sha256 | 1 | 9fda16ad1d32f34c221d0e074a4ef13217eded63b5ff507452c4e2bbb57df3a4 |
|
| Details | sha256 | 1 | 9fead901a3012825841cb6091f52e0a914944fbb1460c3ddb9d07213fbb7e30e |
|
| Details | sha256 | 1 | a3317844f3d6b5b2440be896b84fd6aa4ee77a0f9b656b784b235e077b69715d |
|
| Details | sha256 | 1 | a79ff2cd7f47b11d9176c40f0e82ba9b378c463ff9dd6e3e907df9480c7a1547 |
|
| Details | sha256 | 1 | a8497257d78ea15088e0b9c68319a2c0ae8c651ed36780e9424effe97f440c0c |
|
| Details | sha256 | 1 | a8f7eaf999eb6cc8461f785fad13da30315da80b534cae047c5811bbea3351e3 |
|
| Details | sha256 | 1 | b8385ce60ca6c69b7ea67fa93c7d5908809658e7d8a4fb9e003890b820979f53 |
|
| Details | sha256 | 1 | b9360f1434ce7ff45b3ca49ff7269293188a339747b03bcd395b71b1d179700f |
|
| Details | sha256 | 4 | be285b77211d1a33b7ae1665623a9526f58219e20a685b6548bc2d8e857b6b44 |
|
| Details | sha256 | 1 | bfab45d715e0e090ea18849661ed3ed58bdd7310c54c4a14a607eee4cc742e33 |
|
| Details | sha256 | 1 | c267e0bf3f1a0448e66427d5863d762af7cd6cc7ff812e6addcd4e54d9a46ac9 |
|
| Details | sha256 | 1 | e0cdaaba90f061d31cfe0211fe207cb3971970a141d9d72f95c8a55c8d565cb1 |
|
| Details | sha256 | 1 | e2423e93b84284890a27e3796491049a22f6496b3830e20e808dff1c77560e3d |
|
| Details | sha256 | 1 | e3344c598a984dc5dc8dc1d971da8dd9b7058c48288dc5ad063548fff61543a1 |
|
| Details | sha256 | 1 | eddd909b49f2fef023a7b6188b2ae70bbf1e25e85f5e4c84c19cc25641f17175 |
|
| Details | sha256 | 1 | f6d70464165e00de26127464a84919f20521aa4efbecfae41e75688f74436489 |
|
| Details | sha256 | 1 | f95342caa61e77174fe7653eea60909b9db0102c27a0641e25cdc053689110ab |
|
| Details | IPv4 | 1 | 104.234.240.65 |
|
| Details | IPv4 | 2 | 107.175.229.142 |
|
| Details | IPv4 | 2 | 108.181.132.115 |
|
| Details | IPv4 | 2 | 108.181.132.116 |
|
| Details | IPv4 | 2 | 108.181.132.117 |
|
| Details | IPv4 | 3 | 108.181.132.118 |
|
| Details | IPv4 | 2 | 108.181.133.58 |
|
| Details | IPv4 | 2 | 108.181.133.59 |
|
| Details | IPv4 | 2 | 138.201.21.218 |
|
| Details | IPv4 | 2 | 138.201.21.227 |
|
| Details | IPv4 | 2 | 138.201.21.228 |
|
| Details | IPv4 | 2 | 138.201.21.232 |
|
| Details | IPv4 | 2 | 138.201.21.233 |
|
| Details | IPv4 | 2 | 138.201.21.238 |
|
| Details | IPv4 | 2 | 141.94.238.246 |
|
| Details | IPv4 | 2 | 144.172.111.24 |
|
| Details | IPv4 | 2 | 144.172.76.24 |
|
| Details | IPv4 | 2 | 144.76.167.18 |
|
| Details | IPv4 | 2 | 144.76.167.23 |
|
| Details | IPv4 | 2 | 144.76.167.25 |
|
| Details | IPv4 | 2 | 144.76.167.26 |
|
| Details | IPv4 | 2 | 144.76.167.34 |
|
| Details | IPv4 | 2 | 144.76.167.37 |
|
| Details | IPv4 | 5 | 154.7.253.113 |
|
| Details | IPv4 | 2 | 162.0.220.161 |
|
| Details | IPv4 | 2 | 162.0.220.214 |
|
| Details | IPv4 | 2 | 162.0.220.215 |
|
| Details | IPv4 | 2 | 162.0.220.216 |
|
| Details | IPv4 | 2 | 162.0.220.217 |
|
| Details | IPv4 | 2 | 162.0.220.218 |
|
| Details | IPv4 | 3 | 162.0.220.219 |
|
| Details | IPv4 | 3 | 162.0.220.220 |
|
| Details | IPv4 | 2 | 162.19.7.46 |
|
| Details | IPv4 | 2 | 162.19.7.47 |
|
| Details | IPv4 | 2 | 162.19.7.48 |
|
| Details | IPv4 | 2 | 162.19.7.49 |
|
| Details | IPv4 | 2 | 162.19.7.50 |
|
| Details | IPv4 | 2 | 162.19.7.53 |
|
| Details | IPv4 | 3 | 162.19.7.56 |
|
| Details | IPv4 | 2 | 162.19.7.57 |
|
| Details | IPv4 | 2 | 162.19.7.58 |
|
| Details | IPv4 | 2 | 162.19.7.59 |
|
| Details | IPv4 | 2 | 162.19.7.60 |
|
| Details | IPv4 | 2 | 162.19.7.61 |
|
| Details | IPv4 | 2 | 162.210.192.135 |
|
| Details | IPv4 | 2 | 162.210.192.136 |
|
| Details | IPv4 | 2 | 162.210.192.171 |
|
| Details | IPv4 | 2 | 162.210.197.69 |
|
| Details | IPv4 | 2 | 162.210.197.91 |
|
| Details | IPv4 | 2 | 167.88.166.112 |
|
| Details | IPv4 | 2 | 167.88.168.2 |
|
| Details | IPv4 | 2 | 172.86.96.114 |
|
| Details | IPv4 | 2 | 173.211.70.205 |
|
| Details | IPv4 | 2 | 174.138.176.74 |
|
| Details | IPv4 | 2 | 174.138.176.76 |
|
| Details | IPv4 | 2 | 174.138.176.77 |
|
| Details | IPv4 | 2 | 174.138.176.78 |
|
| Details | IPv4 | 2 | 185.45.195.140 |
|
| Details | IPv4 | 3 | 195.154.43.182 |
|
| Details | IPv4 | 2 | 195.154.43.184 |
|
| Details | IPv4 | 2 | 195.154.43.189 |
|
| Details | IPv4 | 2 | 195.154.43.198 |
|
| Details | IPv4 | 3 | 195.154.43.221 |
|
| Details | IPv4 | 3 | 195.154.43.86 |
|
| Details | IPv4 | 2 | 198.7.56.71 |
|
| Details | IPv4 | 2 | 198.7.56.72 |
|
| Details | IPv4 | 2 | 198.7.56.73 |
|
| Details | IPv4 | 2 | 198.7.56.74 |
|
| Details | IPv4 | 2 | 198.7.61.67 |
|
| Details | IPv4 | 2 | 198.7.61.72 |
|
| Details | IPv4 | 2 | 207.189.164.106 |
|
| Details | IPv4 | 3 | 209.159.153.19 |
|
| Details | IPv4 | 2 | 209.159.153.20 |
|
| Details | IPv4 | 2 | 209.159.153.21 |
|
| Details | IPv4 | 2 | 209.159.153.22 |
|
| Details | IPv4 | 2 | 212.83.137.142 |
|
| Details | IPv4 | 2 | 212.83.137.150 |
|
| Details | IPv4 | 2 | 212.83.137.165 |
|
| Details | IPv4 | 2 | 212.83.137.239 |
|
| Details | IPv4 | 2 | 212.83.137.30 |
|
| Details | IPv4 | 2 | 212.83.137.94 |
|
| Details | IPv4 | 2 | 212.83.138.132 |
|
| Details | IPv4 | 3 | 212.83.138.172 |
|
| Details | IPv4 | 2 | 212.83.138.186 |
|
| Details | IPv4 | 2 | 212.83.138.192 |
|
| Details | IPv4 | 3 | 212.83.138.245 |
|
| Details | IPv4 | 2 | 212.83.138.60 |
|
| Details | IPv4 | 2 | 212.83.142.100 |
|
| Details | IPv4 | 2 | 212.83.142.114 |
|
| Details | IPv4 | 2 | 212.83.142.131 |
|
| Details | IPv4 | 3 | 212.83.142.145 |
|
| Details | IPv4 | 2 | 212.83.142.149 |
|
| Details | IPv4 | 3 | 212.83.142.158 |
|
| Details | IPv4 | 2 | 212.83.143.103 |
|
| Details | IPv4 | 2 | 212.83.143.118 |
|
| Details | IPv4 | 2 | 212.83.143.147 |
|
| Details | IPv4 | 2 | 212.83.143.151 |
|
| Details | IPv4 | 2 | 212.83.143.159 |
|
| Details | IPv4 | 3 | 212.83.143.191 |
|
| Details | IPv4 | 2 | 212.83.143.204 |
|
| Details | IPv4 | 2 | 212.83.143.211 |
|
| Details | IPv4 | 2 | 212.83.143.223 |
|
| Details | IPv4 | 3 | 212.83.143.60 |
|
| Details | IPv4 | 2 | 212.83.143.97 |
|
| Details | IPv4 | 5 | 216.107.139.52 |
|
| Details | IPv4 | 2 | 23.105.170.30 |
|
| Details | IPv4 | 2 | 23.105.170.32 |
|
| Details | IPv4 | 3 | 23.105.170.33 |
|
| Details | IPv4 | 3 | 23.105.170.34 |
|
| Details | IPv4 | 2 | 23.105.170.35 |
|
| Details | IPv4 | 2 | 37.59.213.49 |
|
| Details | IPv4 | 3 | 38.91.106.214 |
|
| Details | IPv4 | 2 | 38.91.106.252 |
|
| Details | IPv4 | 2 | 38.91.107.2 |
|
| Details | IPv4 | 2 | 38.91.107.220 |
|
| Details | IPv4 | 2 | 38.91.107.224 |
|
| Details | IPv4 | 2 | 38.91.107.229 |
|
| Details | IPv4 | 2 | 45.61.141.192 |
|
| Details | IPv4 | 2 | 46.105.44.29 |
|
| Details | IPv4 | 2 | 51.254.149.59 |
|
| Details | IPv4 | 2 | 51.254.167.45 |
|
| Details | IPv4 | 2 | 51.68.244.19 |
|
| Details | IPv4 | 2 | 51.83.116.2 |
|
| Details | IPv4 | 2 | 51.83.116.3 |
|
| Details | IPv4 | 3 | 51.83.116.5 |
|
| Details | IPv4 | 3 | 51.83.116.6 |
|
| Details | IPv4 | 2 | 51.83.116.7 |
|
| Details | IPv4 | 2 | 66.23.233.210 |
|
| Details | IPv4 | 3 | 66.29.128.241 |
|
| Details | IPv4 | 2 | 66.29.128.242 |
|
| Details | IPv4 | 4 | 66.29.128.243 |
|
| Details | IPv4 | 3 | 66.29.128.244 |
|
| Details | IPv4 | 3 | 66.29.128.245 |
|
| Details | IPv4 | 3 | 66.29.128.246 |
|
| Details | IPv4 | 2 | 66.29.129.52 |
|
| Details | IPv4 | 3 | 66.29.129.53 |
|
| Details | IPv4 | 2 | 66.29.129.54 |
|
| Details | IPv4 | 2 | 66.29.129.56 |
|
| Details | IPv4 | 2 | 67.213.210.115 |
|
| Details | IPv4 | 3 | 67.213.210.118 |
|
| Details | IPv4 | 2 | 67.213.210.167 |
|
| Details | IPv4 | 2 | 67.213.210.168 |
|
| Details | IPv4 | 3 | 67.213.210.175 |
|
| Details | IPv4 | 2 | 67.213.210.60 |
|
| Details | IPv4 | 2 | 67.213.210.61 |
|
| Details | IPv4 | 2 | 67.213.210.62 |
|
| Details | IPv4 | 3 | 67.213.212.36 |
|
| Details | IPv4 | 2 | 67.213.212.38 |
|
| Details | IPv4 | 2 | 67.213.212.39 |
|
| Details | IPv4 | 2 | 67.213.212.40 |
|
| Details | IPv4 | 2 | 67.213.212.47 |
|
| Details | IPv4 | 2 | 67.213.212.48 |
|
| Details | IPv4 | 3 | 67.213.212.49 |
|
| Details | IPv4 | 2 | 67.213.212.50 |
|
| Details | IPv4 | 3 | 67.213.212.51 |
|
| Details | IPv4 | 2 | 67.213.212.52 |
|
| Details | IPv4 | 3 | 67.213.212.53 |
|
| Details | IPv4 | 2 | 67.213.212.54 |
|
| Details | IPv4 | 2 | 67.213.212.55 |
|
| Details | IPv4 | 2 | 67.213.212.56 |
|
| Details | IPv4 | 2 | 67.213.212.57 |
|
| Details | IPv4 | 2 | 67.213.212.58 |
|
| Details | IPv4 | 1 | 67.220.85.145 |
|
| Details | IPv4 | 2 | 77.83.199.142 |
|
| Details | IPv4 | 4 | 79.141.162.154 |
|
| Details | IPv4 | 2 | 95.169.180.227 |