216.73.217.22

UAT-8099

· Published 21/12/2025 18:10 · Modified 21/12/2025 18:10 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 18:10
Modified
21/12/2025 18:10
Updated at
21/12/2025 18:10
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
2 reports, 25 attack patterns (mitre), 2 malware, 4 sectors, 7 countries, 25 indicators

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (2)

Attack patterns (MITRE) (25 / 34)

  • T1055 uses
    Process Injection
  • T1136.001 uses
    Local Account
  • T1548 uses
    Abuse Elevation Control Mechanism
  • T1496 uses
    Resource Hijacking
  • T1057 uses
    Process Discovery
  • T1098 uses
    Account Manipulation
  • T1059.005 uses
    Visual Basic
  • T1070.001 uses
    Clear Windows Event Logs
  • T1547 uses
    Boot or Logon Autostart Execution
  • T1505.003 uses
    Web Shell
  • T1082 uses
    System Information Discovery
  • T1560 uses
    Archive Collected Data
  • T1059.001 uses
    PowerShell
  • T1083 uses
    File and Directory Discovery
  • T1140 uses
    Deobfuscate/Decode Files or Information
  • T1027.002 uses
    Software Packing
  • T1036 uses
    Masquerading
  • T1528 uses
    Steal Application Access Token
  • T1505 uses
    Server Software Component
  • T1012 uses
    Query Registry
  • T1190 uses
    Exploit Public-Facing Application
  • T1112 uses
    Modify Registry
  • T1003 uses
    OS Credential Dumping
  • T1059.007 uses
    JavaScript
  • T1005 uses
    Data from Local System

Malware (2)

  • BadIIS uses
    Family
    Published 05/06/2026 18:07 · Modified 05/06/2026 18:07
  • GotoHTTP uses
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 Published 29/01/2026 17:47 · Modified 29/01/2026 17:47

Sectors (4)

  • Telecommunications targets
  • Government targets
  • Education targets
  • Technology targets

Countries (7)

  • Thailand targets
  • British Indian Ocean Territory targets
  • India targets
  • Japan targets
  • Brazil targets
  • Pakistan targets
  • Canada targets

Indicators (25 / 153)