Pulse Detail — Threat Intelligence

PULSE NAME

DoNot Go! Do not respawn!

WHITE Donot Team AlienVault 2023-01-26 Modified: 2023-02-25

111

IOCs

HIGH VOLUME

Donot Team is a persistent and persistent threat actor targeting government and military entities in several South Asian countries, according to ESET security researchers, who have traced several campaigns using malware derived from the group's signature.

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1588.005 T1566.001 T1204.002 T1059.005 T1059.003 T1203 T1053.005 T1036.005 T1057 T1534 T1005 T1025 T1074.001 T1113 T1071.001 T1048.003

Indicators of Compromise (7 / 111 total)

All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
domain	biteupdates.live	—	2023-01-26
domain	dataupdates.live	—	2023-01-26
domain	digitalresolve.live	—	2023-01-26
domain	oceansurvey.club	—	2023-01-26
domain	packetbite.live	—	2023-01-26
domain	printersolutions.live	—	2023-01-26
domain	soundvista.club	—	2023-01-26

References (1)

↗ https://www.welivesecurity.com/2022/01/18/donot-go-do-not-respawn/