← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
DoNot Go! Do not respawn!
WHITE Donot Team AlienVault 2023-01-26 Modified: 2023-02-25
111
IOCs
HIGH VOLUME
Donot Team is a persistent and persistent threat actor targeting government and military entities in several South Asian countries, according to ESET security researchers, who have traced several campaigns using malware derived from the group's signature.
yty malware frameworkDarkMusicalGeditspearphishingmacrosWindows APIGoC++VBScriptPython
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (5 / 111 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
hostname firm.tplinkupdates.space — 2023-01-26
hostname info.printerupdates.online — 2023-01-26
hostname manage.biteupdates.site — 2023-01-26
hostname request.resolverequest.live — 2023-01-26
hostname request.soundedge.live — 2023-01-26
References (1)
↗ https://www.welivesecurity.com/2022/01/18/donot-go-do-not-respawn/