NoName057(16) - The Pro-Russian Hacktivist Group Targeting NATO
Tags
country: Bulgaria Czechia Denmark Netherlands Lithuania Poland Russia Ukraine
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Domains - T1583.001 Domains - T1584.001 Dynamic Dns - T1311 Dynamic Dns - T1333 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Denial Of Service
Show in Graph
Common Information
Type Value
UUID c5405eaa-d6aa-40bc-aa7b-06723ea4dbec
Fingerprint b79099511c518c41
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 12, 2023, midnight
Added to db June 1, 2023, 10:47 a.m.
Last updated Nov. 18, 2024, 3:30 p.m.
Headline NoName057(16) – The Pro-Russian Hacktivist Group Targeting NATO
Title NoName057(16) - The Pro-Russian Hacktivist Group Targeting NATO
Detected Hints/Tags/Attributes 77/2/32
Source URLs
Redirection Url
Details Source https://www.sentinelone.com/labs/noname05716-the-pro-russian-hacktivist-group-targeting-nato/
URL Provider
Details Provider Source level domain
Details sentinelone.com www.sentinelone.com
Attributes
Details Type #Events CTI Value
Details Domain 3 
dddosia.github.io
Details Domain 4 
zig35m48zur14nel40.myftp.org
Details Domain 1 
www.defensie.nl
Details Domain 2 
ddosia.py
Details Domain 4 
tom56gaz6poh13f28.myftp.org
Details Domain 4134 
github.com
Details File 2 
ddosia.py
Details File 156 
1.exe
Details File 2 
dosia_v2.exe
Details File 2 
dosia_win_x64.exe
Details sha1 3 
94d7653ff2f4348ff38ff80098682242ece6c407
Details sha1 3 
e786c3a60e591dec8f4c15571dbb536a44f861c5
Details sha1 3 
c86ae9efcd838d7e0e6d5845908f7d09aa2c09f5
Details sha1 3 
e78ac830ddc7105290af4c1610482a41771d753f
Details sha1 3 
09a3b689a5077bd89331acd157ebe621c8714a89
Details sha1 3 
8f0b4a8c8829a9a944b8417e1609812b2a0ebbbd
Details sha1 3 
717a034becc125e88dbc85de13e8d650bee907ea
Details sha1 3 
ef7b0c626f55e0b13fb1dcf8f6601068b75dc205
Details sha1 3 
b63ce73842e7662f3d48c5b6f60a47e7e2437a11
Details sha1 3 
5880d25a8fbe14fe7e20d2751c2b963c85c7d8aa
Details sha1 3 
78248539792bfad732c57c4eec814531642e72a0
Details sha1 4 
1dfc6f6c35e76239a35bfaf0b5a9ec65f8f50522
Details IPv4 4 
31.13.195.87
Details IPv4 5 
2.57.122.82
Details IPv4 4 
2.57.122.243
Details IPv4 5 
109.107.181.130
Details IPv4 4 
77.91.122.69
Details Url 1 
https://www.defensie.nl/actueel/nieuws?pagina={number}
Details Url 3 
https://t.me/noname05716
Details Url 3 
https://t.me/nn05716chat
Details Url 3 
https://github.com/dddosia
Details Url 3 
https://github.com/kintechi341