216.73.217.22

COLDWASTREL

· Published 21/12/2025 05:58 · Modified 21/12/2025 05:58 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 05:58
Modified
21/12/2025 05:58
Updated at
21/12/2025 05:58
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
1 reports, 12 attack patterns (mitre), 4 sectors, 28 indicators

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (1)

Attack patterns (MITRE) (12)

  • T1586 uses
    Compromise Accounts
  • T1078 uses
    Valid Accounts
  • T1194 uses
  • T1598 uses
    Phishing for Information
  • T1497 uses
    Virtualization/Sandbox Evasion
  • T1566 uses
    Phishing
  • T1589 uses
    Gather Victim Identity Information
  • T1204 uses
    User Execution
  • T1595 uses
    Active Scanning
  • Weaken Encryption uses
    T1600
  • T1499 uses
    Endpoint Denial of Service
  • T1557 uses
    Adversary-in-the-Middle

Sectors (4)

  • Education targets
  • Media targets
  • NGO targets
  • Government targets

Indicators (28)

  • egenre.net indicates
  • vocabpaper.com indicates
  • protondrive.online indicates
  • ithostprotocol.com indicates
  • c1fa7cd73a14946fc760a54ebd0c853fab24a080cbf6b8460a949f28801e16fc indicates
  • 4a9a2c2926b7b8e388984d38cb9e259fb4060cccc2d291c7910be030ae5301a3 indicates
  • service-proton.me indicates
  • matalangit.org indicates
  • 00664f72386b256d74176aacbe6d1d6f6dd515dd4b2fcb955f5e0f6f92fa078e indicates
  • esestacey.net indicates
  • resident.ngo indicates
  • 79f93e57ad6be28aae62d14135140289f09f86d3a093551bd234adc0021bb827 indicates
  • efa2fd8f8808164d6986aedd6c8b45bb83edd70ca4e80d7ff563a3fbc05eab89 indicates
  • proton-viewer.com indicates
  • eilatocare.com indicates
  • proton-docs.com indicates
  • xsltweemat.org indicates
  • protondrive.me indicates
  • togochecklist.com indicates
  • protondrive.services indicates
  • 384d3027d92c13da55ceef9a375e8887d908fd54013f49167946e1791730ba22 indicates
  • b07d54a178726ffb9f2d5a38e64116cbdc361a1a0248fb89300275986dc5b69d indicates
  • ideaspire.net indicates
  • proton-reader.com indicates
  • 0ded441749c5391234a59d712c9d8375955ebd3d4d5848837b8211c6b27a4e88 indicates
  • df9d77f3e608c92ef899e5acd1d65d87ce2fdb9aab63bbf58e63e6fd6c768ac3 indicates
  • 603221a64f2843674ad968970365f182c228b7219b32ab3777c265804ef67b0a indicates
  • dj-kqf04.eu1.hubspotlinksfree.com indicates