Resumen APTTrail
APTTrail mantiene indicadores publicos asociados a APT GORGON. Aliases observados: APT GORGON. Conteo por tipo: domain: 44, file_path: 2, ipv4: 1.
Indicadores de Compromiso (IOCs)
| Tipo | Valor | Contexto |
|---|---|---|
| Domain | 0-day.us | APTTrail |
| Domain | 1688jtn.com | APTTrail |
| Domain | 41230077.net | APTTrail |
| Domain | 6474sss.com | APTTrail |
| Domain | acorn-paper.com | APTTrail |
| Domain | asaigoldenrice.com | APTTrail |
| Domain | asdiamecwecw8cew.blogspot.com | APTTrail |
| Domain | bjm9.blogspot.com | APTTrail |
| Domain | brevini-france.cf | APTTrail |
| Domain | buydildoonline.blogspot.com | APTTrail |
| Domain | bylgay.hopto.org | APTTrail |
| Domain | diamondfoxpanel.ml | APTTrail |
| Domain | dixis.bounceme.net | APTTrail |
| Domain | downloads.blogsyte.com | APTTrail |
| Domain | emawattttson.blogspot.com | APTTrail |
| Domain | fast-cargo.com | APTTrail |
| Domain | gritodopovo.com.br | APTTrail |
| Domain | grupomsi.com | APTTrail |
| Domain | guelphupholstery.com | APTTrail |
| Domain | hongmenwenhua.com | APTTrail |
| Domain | ichoubyou.net | APTTrail |
| Domain | klapki.online | APTTrail |
| Domain | microsoftoutlook.duckdns.org | APTTrail |
| Domain | miganshumarataa.blogspot.com | APTTrail |
| Domain | ocha-gidi.xyz | APTTrail |
| Domain | onedrivenet.xyz | APTTrail |
| Domain | panelonetwothree.ga | APTTrail |
| Domain | panelonetwothree.ml | APTTrail |
| Domain | qp0o1j3-dmv4kwncw8e.win | APTTrail |
| Domain | securebotnetpanel.tk | APTTrail |
Referencias
- https://app.any.run/tasks/bb1279af-7fff-4b37-8439-7b303f113082/
- https://app.any.run/tasks/c32b295c-08f4-4337-8f7f-378ba7f9e02b/
- https://github.com/StrangerealIntel/CyberThreatIntel/blob/master/Pakistan/APT/Gorgon/23-08-19/Malware%20analysis%2025-08-19.md
- https://github.com/pan-unit42/iocs/blob/master/gorgon/domains.txt
- https://otx.alienvault.com/pulse/5d1b49a55c01f486b6ff8cf2
- https://otx.alienvault.com/pulse/5d68fb8d77464e86898969f5
- https://otx.alienvault.com/pulse/5f34028dcae5e941a198b11d
- https://twitter.com/Arkbird_SOLG/status/1272512736795283456
- https://twitter.com/MisterCh0c/status/1188219763660591107
- https://twitter.com/Rmy_Reserve/status/1171381881461338112
- https://twitter.com/Zhx_8885/status/1227219569095262208
- https://twitter.com/h4ckak/status/1145984273985331200