216.73.217.22

darcula

· Published 21/12/2025 10:12 · Modified 21/12/2025 10:12 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 10:12
Modified
21/12/2025 10:12
Updated at
21/12/2025 10:12
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
1 reports, 11 attack patterns (mitre), 3 sectors, 5 indicators

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (1)

Attack patterns (MITRE) (11)

  • T1566 uses
    Phishing
  • T1589 uses
    Gather Victim Identity Information
  • T1592 uses
    Gather Victim Host Information
  • T1078 uses
    Valid Accounts
  • T1608 uses
    Stage Capabilities
  • T1590 uses
    Gather Victim Network Information
  • T1584 uses
    Compromise Infrastructure
  • T1586 uses
    Compromise Accounts
  • T1583 uses
    Acquire Infrastructure
  • T1585 uses
    Establish Accounts
  • T1204 uses
    User Execution

Sectors (3)

  • Finance targets
  • Retail targets
  • Technology targets

Indicators (5)

  • v3.magic-cat.world indicates
  • http://v3.magic-cat.world/install.sh indicates
  • http://registry.magic-cat.world/v3/api. indicates
  • registry.magic-cat.world indicates
  • http://registry.magic-cat.world/v3/web indicates