← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
DoNot Go! Do not respawn!
WHITE Donot Team AlienVault 2023-01-26 Modified: 2023-02-25
111
IOCs
HIGH VOLUME
Donot Team is a persistent and persistent threat actor targeting government and military entities in several South Asian countries, according to ESET security researchers, who have traced several campaigns using malware derived from the group's signature.
yty malware frameworkDarkMusicalGeditspearphishingmacrosWindows APIGoC++VBScriptPython
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (21 / 111 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 08361b8dc43764f684ccb70f963eb1cfdf04836e1a82ad86a9e613c3f2bde689 SHA256 of 89ed760d544cefc6082a3649e8079ec87425fe66 SHA256 of 89ed760d544cefc6082a3649e8079ec87425fe66 2023-01-26
FileHash-SHA256 091cde4c9a8e7dd2bfcb6d1854f724f5ec4e47159ec04b8311f44d30a996e5a3 SHA256 of 6643acd5b07444d1b2c049bde61dd66beb0bd247 2023-01-26
FileHash-SHA256 0ded5169df57f4d3f110a68ef1913e0135a0b9dcf0f49b2143cdd4b3f7c20a62 SHA256 of 49e58c6de5245796aef992d16a0962541f1dae0c 2023-01-26
FileHash-SHA256 13655f536fac31e6c2eaa9e6e113ada2a0b5e2b50a93b6bbfc0aaadd670cde9b SHA256 of f74e6c2c0e26997fdb4dd89aa3d8bd5b270637cc 2023-01-26
FileHash-SHA256 19321da02763a73eda1cdff7d073f7da18b5f32121fbddcee8eab60ac13d418a SHA256 of 771b4bea921f509fc37016f5fa22890ca3338a65 2023-01-26
FileHash-SHA256 24f139c75fd33fcb3e02a5d86d33b51bc9f6ab1e3ad75f3637bca24d9d0ed37c SHA256 of 7ddf48ab1cf99990cb61eeaeb3ed06ed8e70a81b 2023-01-26
FileHash-SHA256 2dfef5dcd46e7556437f5f8023c87924d5da5e4afe53f35ff2352928491caca9 SHA256 of f67abc483ee2114d96a90fa0a39496c42ef050b5 2023-01-26
FileHash-SHA256 302bf0252b7dd7243cef7b773d3863dfffd54e7a34225f759595d50d4c88cb8d SHA256 of 1917316c854af9da9ebdbd4ed4cbadf4fdcfa4ce 2023-01-26
FileHash-SHA256 36b8af9e7eade60304cce874c383c6c68f37ea4fa69fcf36095f993b69c8786f SHA256 of dbc8fa70dfed7632ea21b9aaca07cc793712bff3 2023-01-26
FileHash-SHA256 3e2dfdb6b8e832c5f9c6a1a84e770f426bf2e0a08890e9f93c26cb2f99e2b3ff SHA256 of 6ae606659f8e0e19b69f0cb61eb9a94e66693f35 2023-01-26
FileHash-SHA256 4a9752913704c57b3909695ec16950de554745313a9a316f73b38076477fd9db SHA256 of 526e5c25140f7a70ba9f643ada55ae24939d10ae SHA256 of 526e5c25140f7a70ba9f643ada55ae24939d10ae 2023-01-26
FileHash-SHA256 4e607f13785fdc6972e4285dac504ac4dd61d48cfebb6df76ac8a52b0da11d53 SHA256 of 6194e0eca5d494980df5b9ab5cea8379665ed46a 2023-01-26
FileHash-SHA256 893363b078f3f6eb1c52faf8d49f5778d2f157fa925d8503933b58bf846932f8 SHA256 of 540e7338725cbaa2f33966d5c1ae2c34552d4988 2023-01-26
FileHash-SHA256 8ef0a373170189f35c3d5d5e1c11d2d214cede0b4a0a907cdb106d82fcf4d3ae SHA256 of bb0c857908afc878caeec3a0da2cbb0a4fd4ef04 2023-01-26
FileHash-SHA256 914b5945b5feb2427304f67b37c85cf0042b1c8575acfaaa0d8d355960e2c99f SHA256 of b2263a6688e512d90629a3a621b2ee003b1b959e 2023-01-26
FileHash-SHA256 925b2409219c7e13a9b5eb1ce2e9a3868d445362bbb730dcc2dea483acd7edf5 SHA256 of 9185defc6f024285092b563efa69ea410bd6f85b 2023-01-26
FileHash-SHA256 a981104ff4a4be7eea187f3027bacf6bb6e9aa7e9200d4a569617720ff47e5dc SHA256 of fcfee44da272e6eb3fc2c071947df1180f1a8ae1 2023-01-26
FileHash-SHA256 a9c7c187202e8b08c00a73f95c15735b2571a962e3c76d1f43e07ef07e994c36 SHA256 of 4fa31531108cc68ff1865e2eb5654f7b3da8d820 2023-01-26
FileHash-SHA256 cbe215637450f2f3ac8c6fca2f50ba97324cbce2048ceba609627dad68bfcca2 SHA256 of 0290abf0530a2fd2dfb0de29248ba3cabb58d2ad 2023-01-26
FileHash-SHA256 d417fe805ec25443ea2a0999f398ebacb6e366f7de69442757614cad2d36dc90 SHA256 of a15d011bed98bce65db597ffd2d5fde49d46cfa2 2023-01-26
FileHash-SHA256 e7dd5fce4028871771e3a4a63dd6d77b46c2c1e00edd345ae36d8b7b1a52c1f4 SHA256 of 1352a8394ccce7491072aaac9d19ed584e607757 2023-01-26
References (1)
↗ https://www.welivesecurity.com/2022/01/18/donot-go-do-not-respawn/