← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Tracking the Progression of Earth Hundun's Cyberespionage Campaign in 2024
WHITE Tr1sa111 2024-05-23 Modified: 2024-05-23
22
IOCs
MEDIUM VOLUME
progressionearth hundunfilesha256detectionnetwork
MITRE ATT&CK & Malware Families
MALWARE FAMILIES
Waterbear - S0579 Deuterbear
Indicators of Compromise (22)
All FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 057a0e0f522cc217ba8754abbb67f8a667c0054fe0dcdaf01f4930d75cd667cc — 2024-05-23
FileHash-SHA256 31c76585ea703f96c95efab0778f599d8dc5c26eea5d155ce24f614e6bfe9e8c — 2024-05-23
FileHash-SHA256 3d8512a513e5f94ce49a742ae3e4853775f05d7481b29bfacef4316d7ba3bde2 — 2024-05-23
FileHash-SHA256 3ecbca7bf2e4557e92595fe23872658bc3337e6f77a3aff02fb7b460272de7f4 — 2024-05-23
FileHash-SHA256 609120ab45745bcfe8abc244ea1501ef563cb666abd9d730413c3986a76fb23d — 2024-05-23
FileHash-SHA256 88336746f2cf1034871c4ee334fae0d30c3eb101df6f3f1c94c777639293a031 — 2024-05-23
FileHash-SHA256 974c407dd918ccba245da0fb9d5a68f123c78aacfa85cdaba2271d6ad81380ae — 2024-05-23
FileHash-SHA256 d4b5127988fde3704193a30840e991dc745aea051d1551c7cb6f55853c8cb9da — 2024-05-23
domain availitond.com — 2024-05-23
domain bakhell.com — 2024-05-23
domain ccarden.com — 2024-05-23
domain centralizebd.com — 2024-05-23
domain dailteeau.com — 2024-05-23
domain gayionsd.com — 2024-05-23
domain gelatosg.com — 2024-05-23
domain lucashnancy.com — 2024-05-23
domain nestnewhome.com — 2024-05-23
domain operatida.com — 2024-05-23
domain quadrantbd.com — 2024-05-23
domain randaln.com — 2024-05-23
domain rchitecture.org — 2024-05-23
domain taishanlaw.com — 2024-05-23
References (3)
↗ https://www.trendmicro.com/content/dam/trendmicro/global/en/research/24/e/tracking-the-progression-of-earth-hundun-cyberespionage-campaign-/ioc-tracking-the-progression-of-earth-hundun-cyberespionage-campaign-in-2024.txt ↗ https://www.trendmicro.com/en_us/research/24/e/earth-hundun-2.html ↗ https://www.trendmicro.com/en_ph/research/24/d/earth-hundun-waterbear-deuterbear.html