Basado en actor, pais, IOCs, TTPs, filtracion y calidad de contexto.
APTTrail mantiene indicadores publicos asociados a crouching yeti. Aliases observados: crouching yeti, dragonfly, iron liberty, tg-4192. Conteo por tipo: domain: 5, url: 2.
| Tipo | Valor | Contexto |
|---|---|---|
| Domain | ecco0.b13x.org | APTTrail |
| Domain | kanri.rbridal.net | APTTrail |
| Domain | lite.ultralitedesigns.com | APTTrail |
| Domain | satanal.info | APTTrail |
| Domain | tureg.info | APTTrail |
| URL | http://155.207.63.4 | APTTrail |
| URL | http://51.159.28.101 | APTTrail |
Mapa de nodos relacionados por IOCs compartidos, actor, enlaces IntelTracker/OSINT, campanas y victimas observadas. Haz click en un nodo para abrir el post, filtro o fuente.
| Tipo | Valor | Contexto | OSINT |
|---|---|---|---|
| Domain | ecco0.b13x.org | APTTrail | VT OffSec SOCRadar |
| Domain | kanri.rbridal.net | APTTrail | VT OffSec SOCRadar |
| Domain | lite.ultralitedesigns.com | APTTrail | VT OffSec SOCRadar |
| Domain | satanal.info | APTTrail | VT OffSec SOCRadar |
| Domain | tureg.info | APTTrail | VT OffSec SOCRadar |
| URL | http://155.207.63.4 | APTTrail | VT OffSec SOCRadar |
| URL | http://51.159.28.101 | APTTrail | VT OffSec SOCRadar |
| IP | 155.207.63.4 | Extraido del contenido | VT OffSec SOCRadar |
| IP | 51.159.28.101 | Extraido del contenido | VT OffSec SOCRadar |
| Domain | lab52.io | Extraido del contenido | VT OffSec SOCRadar |
| Domain | securelist.com | Extraido del contenido | VT OffSec SOCRadar |
| Domain | www.virustotal.com | Extraido del contenido | VT OffSec SOCRadar |