Yellow Liderc APT IOCS - SEC-1275-1
Tags
| attack-pattern: | Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Python - T1059.006 |
Common Information
| Type | Value |
|---|---|
| UUID | c5730940-0668-4103-bb83-688b6a7f5ffa |
| Fingerprint | 5d9e3e3789f16141 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Oct. 27, 2023, midnight |
| Added to db | Oct. 27, 2023, 7:45 a.m. |
| Last updated | Oct. 31, 2024, 7:48 a.m. |
| Headline | Yellow Liderc APT IOCS |
| Title | Yellow Liderc APT IOCS - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 12/1/96 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://1275.ru/ioc/2772/yellow-liderc-apt-iocs/?from=rss |
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 3 | cdnpakage.com |
|
| Details | Domain | 2 | criticimfreedom.site |
|
| Details | Domain | 2 | europetourtravels.link |
|
| Details | Domain | 2 | europetourtravels.world |
|
| Details | Domain | 2 | fastanalizer.live |
|
| Details | Domain | 2 | fastanalytics.live |
|
| Details | Domain | 2 | instructables.live |
|
| Details | Domain | 2 | login.microsoftonilne.com.oauth2.online |
|
| Details | Domain | 2 | loginlive.formsmicrosoftoffice.com.oauth2.live |
|
| Details | Domain | 2 | megamodel.studio |
|
| Details | Domain | 2 | mentalfloss.live |
|
| Details | Domain | 2 | metatransfer.online |
|
| Details | Domain | 2 | msofficesign.com |
|
| Details | Domain | 2 | myfridgefood.live |
|
| Details | Domain | 2 | nirsoft.app |
|
| Details | Domain | 2 | nirsoft.ink |
|
| Details | Domain | 2 | oauth2.live |
|
| Details | Domain | 2 | oauth2.online |
|
| Details | Domain | 2 | outlookmicrosoftonline.com |
|
| Details | Domain | 2 | prostatistics.live |
|
| Details | Domain | 2 | transportorganizationil.shop |
|
| Details | Domain | 155 | yandex.com |
|
| Details | 1 | brodyheywood@yandex.com |
||
| Details | 1 | hardi.lorel@yandex.com |
||
| Details | 2 | leviblum@yandex.com |
||
| Details | md5 | 1 | 0df7bda8bfbb5828ca09fff7e70b34b8 |
|
| Details | md5 | 1 | 20507d265a7495cc1e4ade1e8639666e |
|
| Details | md5 | 1 | 366623939b90fdf277b43f457ac7b2ed |
|
| Details | md5 | 1 | 50516ccade993979b18d7896ff17c3c9 |
|
| Details | md5 | 1 | 6bfb2b02992de48a0242a7ff03623205 |
|
| Details | md5 | 1 | 6d02207c9ce1b3967077065c40eb1bb1 |
|
| Details | md5 | 1 | 88ed93f824fbc5c73f7b47bf9d32b8e7 |
|
| Details | md5 | 1 | 97d132f248bc95ea2810a816574756f6 |
|
| Details | md5 | 1 | a6b68493ace6398f95fc5720b1a16526 |
|
| Details | md5 | 1 | cb97310e5ca5ebc6a12358e97219487a |
|
| Details | md5 | 1 | d009734407d38aac5735d182b0fffc86 |
|
| Details | md5 | 1 | d9d153b162a8edab7841e9747a086e2c |
|
| Details | md5 | 1 | e78142f546f2972117db1d8403d556be |
|
| Details | md5 | 1 | ee2de347c90c21e0e6917223c32ac61b |
|
| Details | sha1 | 1 | 01b4ed3e7d026f9b9038e93bb3313602256aaf2f |
|
| Details | sha1 | 1 | 065a43ffd414f62efd779af4bfb5b9e9290bb3f2 |
|
| Details | sha1 | 1 | 0a3ec309299058c12a579c04d110001b77c311c5 |
|
| Details | sha1 | 1 | 124d3cc91135766d4f93a5527bd323e1c23a3e2a |
|
| Details | sha1 | 1 | 1860938bb192344df34b2ade9d804c91681d767d |
|
| Details | sha1 | 1 | 35be50f7f7f47abe64e555cae3088f40b7b3ebbe |
|
| Details | sha1 | 1 | 48e30cd34178be36d7cfea2479361dd8280e726d |
|
| Details | sha1 | 1 | 5ceff2dbf7091c3906003bf5b77fd08deb71317e |
|
| Details | sha1 | 1 | 64c06102653cd94b67417160b1ec61f240cd4d78 |
|
| Details | sha1 | 1 | 8d2a0b8b94a1a0fc1d357737d06809b8aac93165 |
|
| Details | sha1 | 1 | a20e34f575dc2816088d8a6ae0dc9940bd229e95 |
|
| Details | sha1 | 1 | afa40f62a1df6a3949f46a61055be043cf9ff55d |
|
| Details | sha1 | 1 | c43ae2eaa8b134861f4539b205bf97b4e6b3b857 |
|
| Details | sha1 | 1 | ed7e2cd95b442a290478ae750794f0c346de8e73 |
|
| Details | sha256 | 2 | 0ec131ca6fae327202577473137462086b3ce3130896fd8d8db69247ac720f04 |
|
| Details | sha256 | 2 | 1a996d98ab897bbc3a0249ea43afaf841b31396be7cbe61b443a58d1c9aab071 |
|
| Details | sha256 | 2 | 26881615e121584b8814916d2f0228de97439cf6b654fca58b2228ff893fcfbc |
|
| Details | sha256 | 2 | 32c40964f75c3e7b81596d421b5cefd0ac328e01370d0721d7bfac86a2e98827 |
|
| Details | sha256 | 2 | 3e3effa0388f362e891ccf6f9169f9fb9627698bea5fefa57084353603502886 |
|
| Details | sha256 | 2 | 528f4d63c5abcfd137569e2dda49b5730432fb189ef2263cd6e7222cbb6ccb75 |
|
| Details | sha256 | 2 | 7bf2aaf5f82ba5ed834b6ee270e4a7326a191985ea6cc27bdaba17816d1f2ca9 |
|
| Details | sha256 | 2 | 87ccd1c15adc9ba952a07cd89295e0411b72cd4653b168f9b3f26c7a88d19b91 |
|
| Details | sha256 | 2 | 91526246682b47e5f4e396130f2ff93943fbdcaf742262345fb35ae950f1d2b2 |
|
| Details | sha256 | 2 | 92687d1f47244d3a1d7b02fbccf389b9819fd7cc3a31036ae30c2d4d88a3f266 |
|
| Details | sha256 | 2 | 989373f2d295ba1b8750fee7cdc54820aa0cb42321cec269271f0020fa5ea006 |
|
| Details | sha256 | 2 | 9fcb7dea92ad0fe5fa6d6a5a5bd47caea5d3bc44aee247a001fcefdc56500111 |
|
| Details | sha256 | 2 | cc7120942edde86e480a961fceff66783e71958684ad1307ffbe0e97070fd4fd |
|
| Details | sha256 | 2 | d3677394cb45b0eb7a7f563d2032088a8a10e12048ad74bae5fd9482f0aead01 |
|
| Details | sha256 | 2 | ebf2ec38ed0c4cd05aaae1bdb4af862294d8bd874f7830c42f6905e94de239cf |
|
| Details | IPv4 | 1 | 104.238.156.70 |
|
| Details | IPv4 | 1 | 162.252.175.142 |
|
| Details | IPv4 | 1 | 167.88.166.26 |
|
| Details | IPv4 | 2 | 170.130.55.55 |
|
| Details | IPv4 | 1 | 178.23.190.74 |
|
| Details | IPv4 | 1 | 188.227.58.158 |
|
| Details | IPv4 | 1 | 192.254.71.7 |
|
| Details | IPv4 | 1 | 192.71.27.170 |
|
| Details | IPv4 | 1 | 192.71.27.20 |
|
| Details | IPv4 | 1 | 192.71.27.30 |
|
| Details | IPv4 | 1 | 193.182.144.185 |
|
| Details | IPv4 | 1 | 193.182.144.68 |
|
| Details | IPv4 | 1 | 195.20.17.237 |
|
| Details | IPv4 | 1 | 195.238.126.132 |
|
| Details | IPv4 | 1 | 212.150.236.253 |
|
| Details | IPv4 | 1 | 212.29.215.67 |
|
| Details | IPv4 | 1 | 216.108.231.123 |
|
| Details | IPv4 | 1 | 216.108.237.80 |
|
| Details | IPv4 | 1 | 38.60.136.253 |
|
| Details | IPv4 | 1 | 45.133.16.108 |
|
| Details | IPv4 | 1 | 45.138.27.3 |
|
| Details | IPv4 | 1 | 45.155.249.180 |
|
| Details | IPv4 | 1 | 64.46.102.11 |
|
| Details | IPv4 | 1 | 77.91.74.5 |
|
| Details | IPv4 | 1 | 79.132.128.169 |
|
| Details | IPv4 | 1 | 83.229.73.203 |
|
| Details | IPv4 | 1 | 94.131.114.23 |
|
| Details | IPv4 | 1 | 94.131.114.48 |