← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Earth Baku: An APT Group Targeting Indo-Pacific Countries With New Stealth Loaders and Backdoor
WHITE APT41 AlienVault 2021-09-10 Modified: 2024-08-16
76
IOCs
HIGH VOLUME
An APT group known as Earth Baku has updated its arsenal of malware tools to target companies in the Indo-Pacific region. Earth Baku, a cyberespionage and cybercriminal group, was charged by the US Department of Justice in August 2020 with computer intrusion offenses related to data theft, ransomware, and cryptocurrency mining attacks.
cobalt strikestealthmutantscramblecrossstealthvectorapt41eath baku
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
StealthMutant ScrambleCross StealthVector Cobalt Strike - S0154
Indicators of Compromise (4 / 76 total)
All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL http://45.138.157.78:80 — 2021-09-10
URL http://ns1.extrsports.ru:443 — 2021-09-10
URL http://www.microsofthelp.dns1.us:443 — 2021-09-10
URL http://www.twitterproxy.com:443 — 2021-09-10
References (1)
↗ https://documents.trendmicro.com/assets/white_papers/wp-earth-baku-an-apt-group-targeting-indo-pacific-countries.pdf