216.73.217.22

Wagmi

· Published 21/12/2025 13:23 · Modified 21/12/2025 13:23 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 13:23
Modified
21/12/2025 13:23
Updated at
21/12/2025 13:23
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
1 reports, 22 attack patterns (mitre), 4 malware, 93 indicators

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (1)

Attack patterns (MITRE) (22)

  • T1005 uses
    Data from Local System
  • T1057 uses
    Process Discovery
  • T1140 uses
    Deobfuscate/Decode Files or Information
  • T1027 uses
    Obfuscated Files or Information
  • T1036 uses
    Masquerading
  • T1497 uses
    Virtualization/Sandbox Evasion
  • T1055 uses
    Process Injection
  • T1059.005 uses
    Visual Basic
  • T1566 uses
    Phishing
  • T1083 uses
    File and Directory Discovery
  • T1082 uses
    System Information Discovery
  • T1573 uses
    Encrypted Channel
  • T1129 uses
    Shared Modules
  • T1584 uses
    Compromise Infrastructure
  • T1553.002 uses
    Code Signing
  • T1132 uses
    Data Encoding
  • T1071 uses
    Application Layer Protocol
  • T1012 uses
    Query Registry
  • T1074 uses
    Data Staged
  • T1056 uses
    Input Capture
  • T1552 uses
    Unsecured Credentials
  • T1547.009 uses
    Shortcut Modification

Malware (4)

  • LummaC2 uses
    Family
    Published 16/01/2026 20:33 · Modified 16/01/2026 20:33
  • AMOS uses
    Family
    Published 18/05/2026 17:52 · Modified 18/05/2026 17:52
  • Hijackloader uses
    Family
    Published 10/06/2026 11:58 · Modified 10/06/2026 11:58
  • Rhadamanthys uses
    Family
    Published 29/04/2026 02:24 · Modified 29/04/2026 02:24

Indicators (93)

  • swdgame.xyz indicates
  • kosmosgrid.com indicates
  • splarecall.xyz indicates
  • aperoyaleplay.com indicates
  • animaliagame.xyz indicates
  • playgunrush.xyz indicates
  • us005web-zoom.us indicates
  • strikeforcegame.xyz indicates
  • roarlandplay.xyz indicates
  • animaliagame.net indicates
  • roboversegame.xyz indicates
  • gamehosting.shop indicates
  • 1ae7cdd81585233bfb3871385c67dd7fb43bfb2231ab2af5aded08d49c490f16 indicates
  • playbattleforge.org indicates
  • us007web-zoom.us indicates
  • d516515e923875ae22b6325bba9e53f5fa531aa7c6c7a386fb380f3ae92b5009 indicates
  • us006web-zoom.us indicates
  • us08web-zoom.us indicates
  • myultimate.xyz indicates
  • animalia-game.xyz indicates
  • 154af50ab1f4b14e10b2532574c3856bbdadaabb042ade5bf39a7153cb9e89f8 indicates
  • jungle-legends.com indicates
  • rocketlegacygame.com indicates
  • us05webs-zoom.pw indicates
  • jungle-legends.io indicates
  • playultimate.xyz indicates
  • apestarshq.io indicates
  • junglelegends.io indicates
  • roarland.org indicates
  • strikeleague.xyz indicates
  • splare.cc indicates
  • us003webzoom.us indicates
  • 2005bd6b7613d7c6bc8ea6e179f498b05feb185237511eebce44a5d3d87662ec indicates
  • 9f4e52d4dfb7ebf09e0371a92280ad21519030f7032077cba125903454dd211d indicates
  • us004web-zoom.us indicates
  • apestars.io indicates
  • showdowngame.io indicates
  • 75ba94534ea1433f70c57de43b27b9dc1c9f310e004fa5c70ad3e6b79650328a indicates
  • strikeleaguenft.xyz indicates
  • junglelegends.xyz indicates
  • mybattleforge.xyz indicates
  • playroboverse.xyz indicates
  • us050web-zoom.us indicates
  • playbattleforge.xyz indicates
  • playroarland.xyz indicates
  • http://gamehosting.shop/api indicates
  • astriia.com indicates
  • battleforge.cc indicates
  • playrocketlegacy.xyz indicates
  • us002webzoom.us indicates
  • playrocketrumble.xyz indicates
  • playswd.xyz indicates
  • playrobovrs.xyz indicates
  • http://asoonworld.com/macshare.php indicates
  • gunrushgame.xyz indicates
  • e0e0b3d2890053cbdf84d6c3177e267d8f767f4b2b6d6e5fb2de5860b0a09ee2 indicates
  • splarecall.com indicates
  • 38eff554ddee7664cd8b1c003ddf96f7ebe608acbe236b74e9045fd831a0c100 indicates
  • playstrikeforcenow.com indicates
  • playshowdown.xyz indicates
  • aperoyaleplay.io indicates
  • us01web-zoom.us indicates
  • rocketrumblesol.xyz indicates
  • ultimategame.xyz indicates
  • roarland.xyz indicates
  • apestarshq.net indicates
  • playanimalia.xyz indicates
  • battleultimate.xyz indicates
  • us008web-zoom.us indicates
  • ecdd79c3228b8f354e6c0148c00038790bd8a874428dc9b3f57111e753d3565f indicates
  • 42735792cc7e76b7439751d4aa673d5bd61d100f8d4de42c9084db46e2a1dbf1 indicates
  • zoom.us50web.xyz indicates
  • http://kosmosgrid.com/macshare.php indicates
  • rocketlegacy.xyz indicates
  • 1d879fb13ed76a9892d8e9ea99aa6817cd1248d409956c1ab1b47c2f79c103bd indicates
  • apestarshq.com indicates
  • asoonworld.com indicates
  • ultimateplay.xyz indicates
  • playgunrushnow.xyz indicates
  • splarecall.cc indicates
  • rocketrumble.xyz indicates
  • aperoyale.net indicates
  • playapestars.com indicates
  • us09web-zoom.us indicates
  • playswdbtc.xyz indicates
  • rocketlegacy.net indicates
  • roarland.io indicates
  • splare.io indicates
  • splare.xyz indicates
  • apestarshq.org indicates
  • apestarshq.xyz indicates
  • rocketlegacy.io indicates
  • gunrush.xyz indicates