← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
A peek into APT36’s updated arsenal
WHITE APT36 AlienVault 2023-09-18 Modified: 2023-09-18
47
IOCs
MEDIUM VOLUME
In July 2023, researchers discovered new malicious activity perpetuated by the Pakistan-based advanced persistent threat group (APT36). APT36 is a sophisticated cyber threat group with a history of conducting targeted espionage operations in South Asia.
apt36elizaratgoogle drivewindowsandroidMythic Poseidon
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
ElizaRAT Mythic Poseidon
Indicators of Compromise (21 / 47 total)
All URL FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 1741147a31526e23798a7a1b702ade36 — 2023-09-18
FileHash-MD5 248d4e6bb0f32afd7a1cfb975910235a — 2023-09-18
FileHash-MD5 36b19ca8737c63b9c9a3365ff4968ef5 — 2023-09-18
FileHash-MD5 3c3c9303ae33f3bae2e139dbb1db838e — 2023-09-18
FileHash-MD5 574013c4a22ca2d8d8c76e65ef5e8059 — 2023-09-18
FileHash-MD5 62ee540334236723136bf0fecfeb6311 — 2023-09-18
FileHash-MD5 65167974b397493fce320005916a13e9 — 2023-09-18
FileHash-MD5 66a69bf967bb882e34b1c32081a9ccee — 2023-09-18
FileHash-MD5 6a2243837c71d8071523cc76b8d4af43 — 2023-09-18
FileHash-MD5 7608c396f0dfb9eac8d88a7b5a7e04e4 — 2023-09-18
FileHash-MD5 8e4f65d5d58fca38a6d66a1afb228f20 — 2023-09-18
FileHash-MD5 98279047a7db080129e5ec84533822ef — 2023-09-18
FileHash-MD5 9c66f8c0c970822985600bed04e56434 — 2023-09-18
FileHash-MD5 9cc4c6ca7826c0771cfbdf27b2bbb515 — 2023-09-18
FileHash-MD5 a279035702edd9f2507b5ce5fa69c6d4 — 2023-09-18
FileHash-MD5 a37d9aa1e165b9dc6c4ff396a9df49aa — 2023-09-18
FileHash-MD5 b14884744cf3f86f6bd5a87f6bcbed85 — 2023-09-18
FileHash-MD5 b89990ec5fe9b5cef59f1cd690403a75 — 2023-09-18
FileHash-MD5 c86f9ef23b6bb200fc3c0d9d45f0eb4d — 2023-09-18
FileHash-MD5 f27a4968af4ed64baef8e086516e86ac — 2023-09-18
FileHash-MD5 fc99daa2e1b47bae4be51e5e59aef1f0 — 2023-09-18
References (1)
↗ https://www.zscaler.com/blogs/security-research/peek-apt36-s-updated-arsenal