Resumen APTTrail
APTTrail mantiene indicadores publicos asociados a APT POLONIUM. Aliases observados: APT POLONIUM. Conteo por tipo: ipv4: 16, url: 5.
Indicadores de Compromiso (IOCs)
| Tipo | Valor | Contexto |
|---|---|---|
| IP | 146.70.86.6:1433 | APTTrail |
| IP | 185.203.119.99:8080 | APTTrail |
| IP | 185.244.129.216:5055 | APTTrail |
| IP | 185.244.129.216:8080 | APTTrail |
| IP | 185.244.129.79:63047 | APTTrail |
| IP | 195.166.100.23:5055 | APTTrail |
| IP | 45.137.148.7:2121 | APTTrail |
| IP | 45.80.148.119:8080 | APTTrail |
| IP | 45.80.148.167:21 | APTTrail |
| IP | 45.80.148.167:5055 | APTTrail |
| IP | 45.80.148.186:8080 | APTTrail |
| IP | 45.80.149.108:8080 | APTTrail |
| IP | 45.80.149.154:1302 | APTTrail |
| IP | 45.80.149.154:21 | APTTrail |
| IP | 45.80.149.22:8080 | APTTrail |
| IP | 45.80.149.68:63047 | APTTrail |
| URL | http://212.73.150.174 | APTTrail |
| URL | http://37.120.233.89 | APTTrail |
| URL | http://45.80.149.71 | APTTrail |
| URL | http://51.83.246.73 | APTTrail |
| URL | http://94.156.189.103 | APTTrail |
Referencias
- https://github.com/eset/malware-ioc/tree/master/polonium
- https://twitter.com/k3yp0d/status/1658089065885884420
- https://www.virustotal.com/gui/file/70e4b5d32abfa9134122ae36ba64d060bc6c1d33fbabcf7869d3df5e337698a4/detection
- https://www.virustotal.com/gui/file/a81247a8a16bc1c0077346dacfa005d49f26386381819f3ed8e047b4382668fe/detection
- https://www.welivesecurity.com/2022/10/11/polonium-targets-israel-creepy-malware/