Pulse Detail — Threat Intelligence

PULSE NAME

TA551 Campaign Q3 2021

WHITE TA551 AlienVault 2021-06-22 Modified: 2021-07-22

834

IOCs

HIGH VOLUME

↓ CSV ↓ JSON

TA551 campaign data on Q3 2021

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1071.001 T1547.001 T1059.001 T1059.005 T1543.003 T1132 T1005 T1074 T1140 T1568.002 T1041 T1564.003 T1070.004 T1105 T1056.004 T1559.001 T1185 T1036.005 T1112 T1106 T1027 T1057 T1055.005 T1055.012 T1090 T1090.003 T1012 T1091 T1013 T1082 T1007 T1080 T1497.003 T1047

MALWARE FAMILIES

Ursnif Gozi

Indicators of Compromise (7 / 834 total)

All hostname FileHash-MD5 FileHash-SHA256 FileHash-SHA1 domain URL

TYPE	INDICATOR	DESCRIPTION	CREATED
URL	http://albumtv2009b.com/adda/39878/EUGZTWPD7ciHqU/nN7o64/arTPF9GqdTnKTUOLiUkVv6M/du5htkww/ZWLcraKrngKbKPtJ1YaYahvfEQKnrf/focy2?id=g6luuTT0tUCKVwZO6y0&n5LUNflu=WCDm7&id=g831m2gGQ1UwIGJSp5WBVP&id=1T0LgzTwCwvYIsdzCAQiWEK&user=LuGTfoN12iIWsEuSnsKx7aA9yK&q=GO	—	2021-06-22
URL	http://checkbaileyd.com/adda/73029/GGlZxg9zz4qKgcolAeNIZhPHsVeEsfc/95316/ipSebORfpCUINNClIO5m0DT/K/y6srZaScaV1WrQZTDSnL6vgLGGfDIUqz47oi3Nf3xVzwQW/QPw3R4P3JCYDOW54X1I2ujZLhMuYDUiTqF1eYwKc9q5xiR6/22974/focy10?jG7mnwM=NLvHnnU&q=4eX6zi8EvGSru7vWBPS9rvku6o&=cm1K88E&mjhOTXWu45=aJDuAe54Xpq&C6NVG5EsXQ=OhmLI05IoY&xwzpouLOFf=ez&page=QVgXG3DXP&=tAfHmbV7HXYc	—	2021-06-22
URL	http://conwayfilmg.com/adda/79847/co8nuyPvsa8xRxyATw1eht1zgdvb/Yci0na/bdLCmVpxnoq/dyOjt0mFLv/73527/Zul0fpjXrrGPU/58014/fzGxtKDSGImRmy6luSAFvM1E/82880/focy8?time=6xbiH&search=8LA26jSjP5lN2	—	2021-06-22
URL	http://farmerdwarfg.com/adda/l02ORW3EL7HgVszlEtL8O6RlK/cjBFoOU4b7ILgAuPQ2cRFOkYWMOKog8he6h9aFHtqLmPKMK/wPxSl3zD6o0j8kX8/0NSmfyMTh6lSbFnjzXgEwcORE6op1UPgejtUoybh6/TrSCGZUx7RDTbE/1868/zKzQIsjVqXyirBM3YeVMJc/Wlo2k1af63KOYNBPb5ISqhw3Wd2X/23865/focy1?cid=uNKoRrv&a7wL6NCJP=laqMA1u&N8borW2=qZMM&8CNKivD91N=avjTpsqMY8Yhrd&ref=Wcx015IMFMoQCB3h5qDHNACbWVZk&user=eY0duMW&cid=q3U6NjMyVfmZ7lMCfzAbEoVSbLlq&cid=3rzmtmrEUMKp42XJbX2eYUsYEJczW	—	2021-06-22
URL	http://farmerdwarfg.com/adda/slDmw/q5VZDBKkP/53901/VoV4aV7jfcIU8PodjT/6861/409/RfNjGc6TEZCpKb3brSC4HG2qYFx5fsPoZ69bafbO/b6dOQrvWoC7Uy1vPxtEh4k0mmpxF85JiCbyPv4sn3yqvWZ/pfVtbDSYs1MsYK50V/d34hbAQBucldfao42akDYq1TCFMj57tQYtrYm/focy3?time=l4nwMU5Z1oglgnTafcpybGN6Mc&=zAzmapbhN&page=QM5Z7K5HYoo7gDCWkZQq0oG&time=cE4L1mEacze&page=8e&=lvZPi9sN&1t7=UIp5QQpH2I72e&=ByWLUHv&page=C0EHMn2JVxcpyzozB5iAyaagooIXzT&search=fai	—	2021-06-22
URL	http://houstontermg.com/adda/97989/L1gilQRdZq/69162/21769/92295/LDaP53s4jS/xmbPmbPLTBgcHiQBTvpV3/FiRpMcV1KQoZvQXF/focy6?ref=QMM2RoYUyJaRoSyKnsQTWwia3HAT&id=Vmd8BZgkL2LfL0Q6rP5E90A4IuV6uK&=L3nxZvx0pbc&bxwa6j=W1JDNxusaKQ52ftR&cid=CEY1IPTRZnuRMLPgWYwL&EAebOs=D7BBL9IK3Z2O	—	2021-06-22
URL	http://normalharmond.com/adda/53269/65445/90854/U4MqWgXtsbXrx3DgMAkrh0TVC2FbUUvcJjJqctb/8eUSuIBMfXoHFPedrEBrMgtVq2jOzN5FXTgANaOaNXc/7pcHZTkwpC/focy9?4OxNcPFV=GY0TVdlTHBN&search=I3C9VEsgNHbn9cnelA82dR4w6t&ref=ohRO5gEPxMZedV6T3iG7zYYNHA&sid=b2hcoKh0i16jtB3A2H0NA1hpcNKp&user=eu44SSv8NGhJXy5fQxaupfd&cid=t4ZJEBqbYfqJ9lstoLuZrOYp	—	2021-06-22

References (1)

↗ https://github.com/pan-unit42/tweets/blob/master/2021-06-21-TA551-IOCs-for-Ursnif.txt