MoqHao Part 1.5: High-Level Trends of Recent Campaigns Targeting Japan
Tags
country: Japan South Korea Taiwan Ukraine United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Dynamic Dns - T1311 Dynamic Dns - T1333 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Sms Messages - T1636.004 Whois - T1596.002
Show in Graph
Common Information
Type Value
UUID d2072ed3-73a3-4a18-89d0-1b489aab22fa
Fingerprint ec39417346ae27c2
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 11, 2021, 8 p.m.
Added to db Sept. 11, 2022, 12:41 p.m.
Last updated Dec. 18, 2024, 10:58 p.m.
Headline Dragon News Blog
Title MoqHao Part 1.5: High-Level Trends of Recent Campaigns Targeting Japan
Detected Hints/Tags/Attributes 38/3/14
Source URLs
Redirection Url
Details Source https://team-cymru.com/blog/2021/08/11/moqhao-part-1-5-high-level-trends-of-recent-campaigns-targeting-japan/
URL Provider
Details Provider Source level domain
Details team-cymru.com team-cymru.com
Attributes
Details Type #Events CTI Value
Details Domain 33 
duckdns.org
Details Domain 1 
docomoawbr.duckdns.org
Details IPv4 1 
128.14.75.50
Details IPv4 1 
103.80.134.151
Details IPv4 1 
103.80.134.153
Details IPv4 1 
103.80.134.171
Details IPv4 1 
87.120.36.215
Details IPv4 1 
107.148.191.22
Details IPv4 1 
103.80.134.177
Details IPv4 1 
165.3.91.227
Details IPv4 1 
165.3.91.228
Details IPv4 1 
103.80.134.178
Details IPv4 1 
103.80.134.180
Details IPv4 1 
103.80.134.0