Resumen APTTrail
APTTrail mantiene indicadores publicos asociados a apt-c-39. Aliases observados: apt-c-39, coloredlamberts, lambert, longhorn, plexor. Conteo por tipo: domain: 4, ipv4: 3.
Indicadores de Compromiso (IOCs)
| Tipo | Valor | Contexto |
|---|---|---|
| Domain | cdn.fmlstatic.com | APTTrail |
| Domain | financasdebrasil.com | APTTrail |
| Domain | fmlstatic.com | APTTrail |
| Domain | uaefinance.org | APTTrail |
| IP | 103.242.119.71:443 | APTTrail |
| IP | 120.50.38.187:443 | APTTrail |
| IP | 161.5.6.206:3128 | APTTrail |
Referencias
- https://malpedia.caad.fkie.fraunhofer.de/actor/longhorn
- https://securelist.com/unraveling-the-lamberts-toolkit/77990/
- https://www.virustotal.com/gui/file/94c9400a7c092d39b053b98d3fb9b241ebd40d820894fa0aaf806d5f813eba06/detection
- https://www.virustotal.com/gui/file/b8734ada49e290d12a5a178a67e5ae45e1e3348e54a1f57ef4cdb92ff8c84086/detection
- https://www.virustotal.com/gui/ip-address/82.141.230.145/relations