APTTrail: APT MINIDUKE indicators and references

Fecha
18 Jun 2026
Actor
apt-miniduke
Tipo
Ioc
Pais
United States
Sector
-
Confianza
high
100
Prioridad analitica
Alta

Basado en actor, pais, IOCs, TTPs, filtracion y calidad de contexto.

12IOCs
0TTPs
apt-minidukeActor
United StatesPais
Executive Summary
APTTrail mantiene indicadores publicos asociados a APT MINIDUKE. Aliases observados: APT MINIDUKE. Conteo por tipo: domain: 6, file_path: 4.

Key Points

  • http://blog.crysys.hu/2013/02/miniduke/
  • http://www.securelist.com/en/blog/208194129/The_MiniDuke_Mystery_PDF_0_day_Government_Spy_Assembler_0x29A_Micro_Backdoor
  • https://securelist.com/miniduke-is-back-nemesis-gemina-and-the-botgen-studio/64107/

Resumen APTTrail

APTTrail mantiene indicadores publicos asociados a APT MINIDUKE. Aliases observados: APT MINIDUKE. Conteo por tipo: domain: 6, file_path: 4.

Indicadores de Compromiso (IOCs)

TipoValorContexto
Domainarabooks.chAPTTrail
Domainartas.orgAPTTrail
Domaineamtm.comAPTTrail
Domainextremesportsevents.netAPTTrail
Domainnews.grouptumbler.comAPTTrail
Domaintsoftonline.comAPTTrail
FILE_PATHalgherolido.it/img/common/thumb/thumb.phpAPTTrail
FILE_PATHrtproductionsusa.com/wp-includes/images/smilies/icon_gif.phpAPTTrail
FILE_PATHstore.extremesportsevents.net/index.phpAPTTrail
FILE_PATHtangentialreality.com/cache/template/yoo_cache.phpAPTTrail

Referencias

Diamond Model

Adversary
apt-miniduke
Ver perfil →
Victim
APTTrail: APT MINIDUKE indicators and references
United States
Capability
Ioc
Infrastructure
arabooks.ch
artas.org
eamtm.com
extremesportsevents.net

Indicadores de Compromiso (IOCs)

TipoValorContextoOSINT
Domain arabooks.ch APTTrail VT OffSec SOCRadar
Domain artas.org APTTrail VT OffSec SOCRadar
Domain eamtm.com APTTrail VT OffSec SOCRadar
Domain extremesportsevents.net APTTrail VT OffSec SOCRadar
Domain news.grouptumbler.com APTTrail VT OffSec SOCRadar
Domain tsoftonline.com APTTrail VT OffSec SOCRadar
FILE_PATH algherolido.it/img/common/thumb/thumb.php APTTrail VT OffSec SOCRadar
FILE_PATH rtproductionsusa.com/wp-includes/images/smilies/icon_gif.php APTTrail VT OffSec SOCRadar
FILE_PATH store.extremesportsevents.net/index.php APTTrail VT OffSec SOCRadar
FILE_PATH tangentialreality.com/cache/template/yoo_cache.php APTTrail VT OffSec SOCRadar
Domain blog.crysys.hu Extraido del contenido VT OffSec SOCRadar
Domain www.securelist.com Extraido del contenido VT OffSec SOCRadar

Referencias y enlaces

→ Perfil del actor apt-miniduke en el blog → Ver apt-miniduke en IntelTracker → URL IntelTracker: blog.crysys.hu→ URL IntelTracker: www.securelist.com→ URL IntelTracker: securelist.com → Fuente OSINT: github.com→ Fuente OSINT: raw.githubusercontent.com→ Fuente OSINT: blog.crysys.hu→ Fuente OSINT: www.securelist.com→ Fuente OSINT: securelist.com → Buscar apt-miniduke en APTTrail → Repositorio APTTrail → Mas incidentes en United States → Buscar en Google News → Analizar en VirusTotal → Feed RSS del blog
← Volver al panel de inteligencia

Incidentes recientes