216.73.217.22

APT36, SideCopy

· Published 21/12/2025 06:08 · Modified 21/12/2025 06:08 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 06:08
Modified
21/12/2025 06:08
Updated at
21/12/2025 06:08
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
1 reports, 18 attack patterns (mitre), 6 malware, 4 sectors, 1 countries, 76 indicators

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (1)

Attack patterns (MITRE) (18)

Malware (6)

  • Reverse RAT uses
    Family
    Published 29/07/2024 10:59 · Modified 29/07/2024 10:59
  • Geta RAT uses
    Family
    Published 29/07/2024 10:59 · Modified 29/07/2024 10:59
  • Crimson RAT uses
    Family
    Published 04/02/2026 15:57 · Modified 04/02/2026 15:57
  • Action RAT - S1028 uses
    Family
    Published 29/07/2024 10:59 · Modified 29/07/2024 10:59
  • Poseidon uses
    Family
    Published 01/08/2025 12:31 · Modified 01/08/2025 12:31
  • DISGOMOJI uses
    Family
    Published 29/07/2024 10:59 · Modified 29/07/2024 10:59

Sectors (4)

  • Government targets
  • Defense targets
  • Transportation targets
  • Manufacturing targets

Countries (1)

  • India targets

Indicators (76)

  • https://mazagondoc.com/images/igfxtk.exe indicates
  • https://slidesfinder.com/free-templates/freefiles/158/tmps.dotm indicates
  • https://mazagondoc.com/images/msedg.bat indicates
  • vocport.com indicates
  • googleservices.live indicates
  • https://campusportals.in/files/documents/xmlnsprcs.hta indicates
  • https://campusportals.in/files/documents/bs/it/ indicates
  • https://mazagondoc.com/images/igfxtk.bat indicates
  • https://mazagondoc.com/documents01/rt12.png indicates
  • https://mazagondoc.com/images/AdobeReader.bat indicates
  • https://slidesfinder.com/free-templates/freefiles/158/08978.png indicates
  • https://mazagondoc.com/images/templates/Aerospace.dotm indicates
  • https://mazagondoc.com/images/word/Project_and_Services_Section_report_10102023.docx indicates
  • https://mazagondoc.com/images/templates/Slide7.png indicates
  • http://vocport.com/khalistanLeaderprotest indicates
  • https://campusportals.in/files/documents/bs/it/1.hta indicates
  • https://campusportals.in/files/documents/bs/survey/2.hta indicates
  • https://mazagondoc.com/documents01/Letter002.pdf indicates
  • https://mazagondoc.com/documents01/001doc.pdf indicates
  • dns1.indianblog.xyz indicates
  • https://dipl.site/Content/2022-23/01/03/Imge12542.hta indicates
  • https://slidesfinder.com/free-templates/freefiles/158/rt12.png indicates
  • https://campusportals.in//files//documents//backup//ap.txt indicates
  • https://dipl.site/Content/2022-23/01/01/ indicates
  • http://vocport.com/Contactus indicates
  • https://mazagondoc.com/images/word/Naval_Projects_Payment_section_Report_131023.docx indicates
  • https://mazagondoc.com/images/pdf/Naval_Projects_Payment_section_Report_29092023.docx indicates
  • checkdailytips.servehttp.com indicates
  • https://campusportals.in/files/documents/bs/economy/ indicates
  • https://campusportals.in/files/documents/bs/economy/1.hta indicates
  • https://campusportals.in/files/documents/bs/it/2.hta indicates
  • https://dipl.site/Content/2022-23/01/01/ugt254d.hta indicates
  • https://campusportals.in/files/documents/bs/economy/2.hta indicates
  • http://178.128.166.148/cjs-bin indicates
  • defender.windowupdatecache.in indicates
  • http://defender.windowupdatecache.in/ indicates
  • https://slidesfinder.com/free-templates/freefiles/158/rtloki.png indicates
  • https://dipl.site/Content/2022-23/01/02/US_China_standoff-Opportunity-for-India-Chadha-21-Aug-23.zip indicates
  • https://utkalsevasamitikanjurmarg.in/assets/pdfs/Salary_Increment_FY_2024/binastos10/newpictures.png indicates
  • http://checkdailytips.servehttp.com/dailyworkout indicates
  • http://165.22.221.71/distro-dlna indicates
  • https://mazagondoc.com/images/templates/Naval_Projects_Payment_section_Report_131023.docx indicates
  • https://mazagondoc.com/images/pdf/cheexe.exe indicates
  • http://defender.windowupdatecache.in/officalupdates indicates
  • https://campusportals.in/files/documents/bs/survey/1.hta indicates
  • https://mazagondoc.com/images/sigthief.py indicates
  • https://utkalsevasamitikanjurmarg.in/assets/pdfs/Salary_Increment_FY_2024/Salary_Increment_FY_2024.zip indicates
  • https://campusportals.in/files/documents/bs/2.hta indicates
  • 91a4093cbda11aa4e4816708fd58c3339315b389d87a34e5078338213c5e07d9 indicates
  • https://mazagondoc.com/images/awccs.bat indicates
  • https://campusportals.in/files/documents/bs/survey/ indicates
  • ordai.quest indicates
  • https://dipl.site/Content/2022-23/01/04/WhatsApp_Image_2024-05-06.zip indicates
  • https://campusportals.in/files/2.hta indicates
  • https://mazagondoc.com/documents01/08978.png indicates
  • 802c3b63a5026a52c90e6e96b5f96e2a70b662d23ff0db63f9ebe2894da6f077 indicates
  • https://mazagondoc.com/documents01/sigthief.py indicates
  • https://mazagondoc.com/images/templates/propritery/doc-logo.png indicates
  • cabinet-gov-pk.ministry-pk.net indicates
  • https://mazagondoc.com/images/msedg.exe indicates
  • https://slidesfinder.com/free-templates/freefiles/158/Letter002.pdf indicates
  • o97m.dropper.dz indicates
  • https://mazagondoc.com/documents01/Filezilla.exe indicates
  • https://mazagondoc.com/images/msedgprefix.exe indicates
  • https://utkalsevasamitikanjurmarg.in/assets/pdfs/Salary_Increment_FY_2024/binastos10/ indicates
  • https://mazagondoc.com/images/AdobeArm.exe indicates
  • https://mazagondoc.com/images/Chromes.exe indicates
  • https://googleservices.live/dakshf_upload.php indicates
  • http://157.245.100.177/acpid-dit indicates
  • https://dipl.site/Content/2022-23/01/03/ indicates
  • http://159.65.146.80/bin-xdg indicates
  • reviewassignment.in indicates
  • http://149.28.95.195/dakshf_upload.php indicates
  • https://mazagondoc.com/images/templates/logo.png indicates
  • e7d7d45677d1552950f74dbb72f214995382baaffea9465da1a412108210335d indicates
  • https://campusportals.in/myfiles/bdocuments/survey1.zip indicates