216.73.217.22

Laundry Bear

· Published 21/12/2025 16:51 · Modified 21/12/2025 16:51 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 16:51
Modified
21/12/2025 16:51
Updated at
21/12/2025 16:51
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
2 reports, 22 attack patterns (mitre), 1 malware, 3 sectors, 3 countries, 79 indicators

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (2)

Attack patterns (MITRE) (22)

Malware (1)

  • DRILLAPP uses
    Family
    Published 17/03/2026 11:01 · Modified 17/03/2026 11:01

Sectors (3)

  • Government targets
  • Defense targets
  • NGO targets

Countries (3)

  • Netherlands targets
  • Ukraine targets
  • United States of America targets

Indicators (79)

  • login.walshhgroup.com indicates
  • 21fefc3913d3d2dfde7f0dff54800ca7512eb5df9513b1a457a2af25fdd51b26 indicates
  • aficors.com indicates
  • it-sharepoint.com indicates
  • microffice.org indicates
  • enticator-secure.com indicates
  • bidscale.net indicates
  • micsrosoftonline.com indicates
  • auth.enticator-secure.com indicates
  • myspringbank.com indicates
  • mail-forgot.com indicates
  • refundes.net indicates
  • css.mpgc10.com indicates
  • 51e86408904c0ca3778361cde746783a0f2b9fd2a6782aa7e062aa597151876e indicates
  • walshhgroup.com indicates
  • 801c47550799831bfb1ac6c5c3fd698be95da19fc85bd65f5d8639f26244d2a9 indicates
  • propescom.com indicates
  • outlook-office.micsrosoftonline.com indicates
  • 886df55794cbca146de96dcc626471b3c097a5c20ba488033b24f4347aa20a14 indicates
  • a545908c931ec47884b5ccfb1f112435f5d0cdac140e664673672c9df9016672 indicates
  • ac60eefc2607216f8126c0b22b6243f3862ef2bb265c585deee0d00a20a436b3 indicates
  • 32973ef02e10a585a4a0196b013265e29fc57d8e1c50752f7b39e43b9f388715 indicates
  • e20831cecd763d0dc91fb39f3bd61d17002608c5a40a6cf0bd16111f4e50d341 indicates
  • deloittesharepoint.com indicates
  • defraudatubanco.com indicates
  • ebsumrnit.eu indicates
  • 6178b1af51057c0bac75a842afff500a8fa3ed957d79a712a6ef089bec7e7a8b indicates
  • onionmail.com indicates
  • static.it-sharepoint.com indicates
  • ccb7d999ee4d979e175b8c87e09ccda0cbc93b6140471283e3a1f1f9da33759d indicates
  • ns1.it-sharepoint.com indicates
  • fb16933b09a4fcca5beff93da05566e924017fb534a2f45caf57b57a633f43a6 indicates
  • app-v4-mybos.com indicates
  • link.walshhgroup.com indicates
  • redronesolutions.cloud indicates
  • ebsurnmit.eu indicates
  • m-365-app.com indicates
  • ebsum.eu indicates
  • ebsummit.eu indicates
  • email.ebsumrnit.eu indicates
  • 2b5d8f8db5fd38ae1c34807dcba35b057cffa61eb14ba3b558f82eb630480c3f indicates
  • 352f34ea5cc40e2b3ec056ae60fa19a368dbd42503ef225cb1ca57956eb05e81 indicates
  • 6fea579685d2433cedb1c32ef704575dcbc1d0a623769e824023ffccd0dedaae indicates
  • login.maidservant.shop indicates
  • ebsummt.eu indicates
  • portal-microsoftonline.com indicates
  • 5b978cdc46afa28d83e532cd19622d9097bebedf87efc4c87bd35d8ffad9e672 indicates
  • f0f3db24af0132755c8a0068dde433f857d8639020deb2817d52d3a1d5d99f35 indicates
  • usembassyservice.com indicates
  • bad7c6f6ca25363a02eaceb3ed1e378218dc4a246a63d723cfcc5feee3af5056 indicates
  • ebsummits.eu indicates
  • 188.137.228.162 indicates
  • max-linear.com indicates
  • ourbelovedsainscore.space indicates
  • aoc-gov.us indicates
  • weblogmail.live indicates
  • x9a7lm02kqaccountprotectionaccountsecuritynoreply.com indicates
  • miscrsosoft.com indicates
  • avsgroup.au indicates
  • remerelli.com indicates
  • ebsumlts.eu indicates
  • ads.it-sharepoint.com indicates
  • b891fa118db5190f07b18be46eb9bc10677f9afab1406a7d52ce587522ab3d28 indicates
  • ups-mail.delivery indicates
  • ee90b01b16099e0bb23d4653607a3a559590fc8d0c43120b8456fb1860d2e630 indicates
  • 8c6ea44ce7f4ed4e4e7e19e11b3b345d58785c93b33aa795ddd1b0d753236b05 indicates
  • 80.89.224.13 indicates
  • 993d55f60414bf2092f421c3d0ac6af1897a21cc4ea260ae8e610a402bf4c81c indicates
  • 107b2badfc93fcdd3ffda7d3999477ced3f39f43f458dd0f6a424c9ab52681c3 indicates
  • 66a7828bc8c6c783b2ffa3c906d53f6dae1bbddc019283cc369d7d73247c5181 indicates
  • 9367f4b4d2775ff47279d143dd9a0ef544ddff81946aab33da9350a49f14e1e1 indicates
  • ebsummlt.eu indicates
  • nticator.com indicates
  • spidergov.org indicates
  • teamsupportonline.top indicates
  • eb9c1649e01db6a9a94d5d50373e54865d672b14ad6f221c98047c562d3cc0f3 indicates
  • maidservant.shop indicates
  • c6905bae088982a2b234451b45db742098f2e2ab4fd6ca62c8f4e801160552aa indicates
  • 76eb713e38f145ee68b89f2febd8f9a28bbb2b464da61cb029d84433a0b2c746 indicates