jordiserrano.me ClickFix KAIROS IntelTracker

APTTrail: APT TA2101 indicators and references

Ioc 18 Jun 2026 1 min lectura apt-ta2101

Fecha

18 Jun 2026

Actor

apt-ta2101

Tipo

Ioc

Pais

Unknown

Sector

Government

Confianza

high

100

Prioridad analitica

Alta

Basado en actor, pais, IOCs, TTPs, filtracion y calidad de contexto.

12IOCs

0TTPs

apt-ta2101Actor

UnknownPais

Executive Summary

APTTrail mantiene indicadores publicos asociados a APT TA2101. Aliases observados: APT TA2101. Conteo por tipo: domain: 2, url: 9.

Key Points

https://www.proofpoint.com/us/threat-insight/post/ta2101-plays-government-imposter-distribute-malware-german-italian-and-us

Resumen APTTrail

APTTrail mantiene indicadores publicos asociados a APT TA2101. Aliases observados: APT TA2101. Conteo por tipo: domain: 2, url: 9.

Indicadores de Compromiso (IOCs)

Tipo	Valor	Contexto
Domain	`conbase.top`	APTTrail
Domain	`uspsdelivery-service.com`	APTTrail
URL	`http://104.168.174.32`	APTTrail
URL	`http://104.168.198.208`	APTTrail
URL	`http://104.168.198.230`	APTTrail
URL	`http://104.168.215.54`	APTTrail
URL	`http://108.174.199.10`	APTTrail
URL	`http://192.119.68.225`	APTTrail
URL	`http://198.50.168.67`	APTTrail
URL	`http://54.39.233.131`	APTTrail
URL	`http://54.39.233.175`	APTTrail

Referencias

https://www.proofpoint.com/us/threat-insight/post/ta2101-plays-government-imposter-distribute-malware-german-italian-and-us

Diamond Model

Adversary

apt-ta2101

Ver perfil →

Victim

APTTrail: APT TA2101 indicators and references

Capability

Ioc

Infrastructure

conbase.top

uspsdelivery-service.com

http://104.168.174.32

http://104.168.198.208

Relations

Mapa de nodos relacionados por IOCs compartidos, actor, enlaces IntelTracker/OSINT, campanas y victimas observadas. Haz click en un nodo para abrir el post, filtro o fuente.

5 enlaces

Domain

www.proofpoint.com

IOC compartido

IntelTracker / OSINT link

www.proofpoint.com

apt-ta2101

enlace asociado al actor

IntelTracker / OSINT link

github.com

apt-ta2101

enlace asociado al actor

IntelTracker / OSINT link

raw.githubusercontent.com

apt-ta2101

enlace asociado al actor

Nodo actual

APTTrail: APT TA2101 indicators and references

apt-ta2101

Victima

APTTrail: FlowCloud indicators and references

www.proofpoint.com

IOC compartido

Victima

APTTrail: APT TA416 indicators and references

www.proofpoint.com

IOC compartido

Indicadores de Compromiso (IOCs)

Tipo	Valor	Contexto	OSINT
Domain	conbase.top	APTTrail	VT OffSec SOCRadar
Domain	uspsdelivery-service.com	APTTrail	VT OffSec SOCRadar
URL	http://104.168.174.32	APTTrail	VT OffSec SOCRadar
URL	http://104.168.198.208	APTTrail	VT OffSec SOCRadar
URL	http://104.168.198.230	APTTrail	VT OffSec SOCRadar
URL	http://104.168.215.54	APTTrail	VT OffSec SOCRadar
URL	http://108.174.199.10	APTTrail	VT OffSec SOCRadar
URL	http://192.119.68.225	APTTrail	VT OffSec SOCRadar
URL	http://198.50.168.67	APTTrail	VT OffSec SOCRadar
URL	http://54.39.233.131	APTTrail	VT OffSec SOCRadar
URL	http://54.39.233.175	APTTrail	VT OffSec SOCRadar
Domain	www.proofpoint.com	Extraido del contenido	VT OffSec SOCRadar

Referencias y enlaces

→ Perfil del actor apt-ta2101 en el blog → Ver apt-ta2101 en IntelTracker → URL IntelTracker: www.proofpoint.com → Fuente OSINT: github.com → Fuente OSINT: raw.githubusercontent.com → Fuente OSINT: www.proofpoint.com → Buscar apt-ta2101 en APTTrail → Repositorio APTTrail → Buscar en Google News → Analizar en VirusTotal → Feed RSS del blog

← Volver al panel de inteligencia

Incidentes recientes

Indicadores de Compromiso

Tipo	Valor
Domain	conbase.top
Domain	uspsdelivery-service.com
URL	http://104.168.174.32
URL	http://104.168.198.208
URL	http://104.168.198.230
URL	http://104.168.215.54
URL	http://108.174.199.10
URL	http://192.119.68.225
URL	http://198.50.168.67
URL	http://54.39.233.131