Resumen APTTrail
APTTrail mantiene indicadores publicos asociados a APT NOISYBEAR. Aliases observados: APT NOISYBEAR. Conteo por tipo: domain: 1, ipv4: 3, url: 1.
Indicadores de Compromiso (IOCs)
| Tipo | Valor | Contexto |
|---|---|---|
| Domain | wellfitplan.ru | APTTrail |
| IP | 178.159.94.8:443 | APTTrail |
| IP | 77.239.125.41:443 | APTTrail |
| IP | 77.239.125.41:8443 | APTTrail |
| URL | http://178.159.94.8 | APTTrail |
Referencias
- https://www.seqrite.com/blog/operation-barrelfire-noisybear-kazakhstan-oil-gas-sector/
- https://www.virustotal.com/gui/file/1bfe65acbb9e509f80efcfe04b23daf31381e8b95a98112b81c9a080bdd65a2d/detection
- https://www.virustotal.com/gui/file/1eecfc1c607be3891e955846c7da70b0109db9f9fdf01de45916d3727bff96e0/detection
- https://www.virustotal.com/gui/file/26f009351f4c645ad4df3c1708f74ae2e5f8d22f3b0bbb4568347a2a72651bee/detection
- https://www.virustotal.com/gui/file/6d6006eb2baa75712bfe867bf5e4f09288a7d860a4623a4176338993b9ddfb4b/detection
- https://www.virustotal.com/gui/file/a40e7eb0cb176d2278c4ab02c4657f9034573ac83cee4cde38096028f243119c/detection
- https://www.virustotal.com/gui/file/d48aeb6afcc5a3834b3e4ca9e0672b61f9d945dd41046c9aaf782382a6044f97/detection
- https://www.virustotal.com/gui/file/da98b0cbcd784879ba38503946898d747ade08ace1d4f38d0fb966703e078bbf/detection
- https://www.virustotal.com/gui/file/fb0f7c35a58a02473f26aabea4f682e2e483db84b606db2eca36aa6c7e7d9cf8/detection
- https://x.com/malwrhunterteam/status/1922587000646848586