Threat Research

Rattling the cage of a Sidewinder

Securonix
EXTRACT IOC
cstc-spares-vip-163.dowmload[.]net8af93bed967925b3e5a70d0ad90eae1f13bc6e362ae3dac705e984f8697aaaadProduct.docxSignature 1

Signature 4

mofa-gov-pk.donwloaded[.]come1ae44d26899969d520789e23c777d6c07785da23454664ad12b2783946a617c

170ccf1225154fa0cd92a14219f0b912479cc4095203646c38a31bb78baafe9f

Note Verbale.docx

Updated_list.docx

Signature 1

Signature 4

Signature 5

mtss.bol-south[.]orga45258389a3c0d4615f3414472c390a0aabe77315663398ebdea270b59b82a5cLeakage of Sensitive Data on Dark Web.docxSignature 1

Signature 4

paknavy.defpak[.]org7dcf935a24039dff2d084f41ab8ca318b28c53c01f9de069f087b3be15457ba9LKGOD.docxSignature 1

Signature 4

mail-dmp-navy-pk.dytt88[.]orga703c6772e8bcf7cd0aef05ecbee4c7f7f39371d45b42bf1030df2be5261717cDMP (Navy) Visit.docxSignature 1www-punjabpolice-gov-pk-sopforsecurityofforeignersandchinese.trans-aws[.]net121648be6641269d626d4d2ad79d234c99b121e0e0588909c05ba870308d9bc9SOP CHINESE SECURITY.docxSignature 1www.sd1-bin[.]netf1cdd47f7a2502902d15adf3ac79c0f86348ba09f4a482ab9108ad98258edb55ADVOCATE.docxSignature 1mailmfa.mofa-gov[.]info0e51c4f52b63e7ce231959168dbc4270b4fa451c58e3bd2081441e7d83915361Letter head.docxSignature 1sarabanmithnavy.tni-mil[.]com921496822997485059ad137e7cd25060cbe6abc9466f2e33c1d7df01630737f4attachment.docxSignature 1

Signature 4

Signature 5

mailmofagovmm.mofa[.]emailacbfbf6fd00fa347a52657e5ca0f5cc6cbcf197a04e2d3fd5dc9235926b319d7

1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a

Hybrid Warefare.docx

file.rtf

Signature 1

Signature 2

Signature 3

Signature 4

www-moha-gov-lk.direct888[.]net931aee9ba0e51804cb354a3a41830721e41a0fab6758aa19a43eaf1abe621b4dArticle-237.docxSignature 1

Signature 4

Signature 5

moitt-gov-pk.fia-gov[.]net1a88ef58675971eb18eeb267b1be90594cd6c7ebddf1c67d66729fa3e68de323

b565bd60e9182746de76feeebe7f85902e22ee3a22d5d55a278be7340923806e

e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d

9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a

e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d

zoom-meeting-guidline.docx

AGREEMENT FOR ENTERPRISE SERVICES.docx

file.rtf

file.rtf

Signature 1

Signature 2

Signature 3

Signature 4

Signature 5

Signature 6

opmcm-gov-np.fia-gov[.]neta11fab6de2c5111833e9e4a6f69ce5dded17085a3d8ae21c7fcfa00d7e113c9bbaidesik-bhraman-nirdesika.docxSignature 1

Signature 4

Signature 5

Signature 6

president-gov-lk.donwloaded[.]net89d4d85592bf0b5e8b55c2d62c9050bfa8c3017f9f497134dbacbb2a0f13a09emof-npd-circ20240103.docxSignature 1

Signature 4

Signature 5

Signature 6

navy-lk.direct888[.]net15ce7d3c879975ca81777cf58f47409283e34ec1fe8e966fde608bc7eda16646පුද්ගලයන් 343ක් අධිකරණයට ඉදිරිපත් කළා.docxSignature 1

Signature 4

Signature 5

Signature 6

mofa-gov-sa.direct888[.]net9d02bf092fdcf44a51ae6e264ec3e3e57afbe79622c92a797e33fb62ed495cda

613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a

Invitation of Saudi Cultural Exhibition Opening Ceremony.docx

file.rtf

Signature 1

Signature 2

Signature 3

Signature 4

Signature 5

Signature 6

mofa-gov-np.fia-gov[.]net55a0bbde3e32c559715cdc9c7d30d003b9e14725a6369d30edef20c1ed6dd994Signature 1

Signature 5

Signature 6

mofadividion.ptcl-gov[.]com53cc8f46f10e4b3958834d75b15db3aa0d8c86a63b8bd3e6ac180c05ce27d748Circular 31082022.docxSignature 1

Signature 4

paknavy-gov-pk.downld[.]net542fb0e314df639a7eef7ff077ddfd9574e70fb5ed5cbaf31c44d97f77e0c43c

4db0a2d4d011f43952615ece8734ca4fc889e7ec958acd803a6c68b3e0f94eea

a3283520e04d7343ce9884948c5d23423499fa61cee332a006db73e2b98d08c3

file.rtf

file.rtf

file.rtf

Signature 2

Signature 3

Signature 4

mofa-gov.interior-pk[.]org8b4259cb1619bcbf3f6760f0982d0a1d3c67aa26738a3d6f6788bf6c2a5410e5file.rtfSignature 2

Signature 3

Signature 4

moitt.paknavy-govpk[.]info1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a

7dca552bc38f54716c80eb2c4f1f35cf6e5b12a78a5cec8bf335453c1b433cfd

MoITT_federalemp.docx

{rtf1 }

Signature 1

Signature 4

moemaldives.pmd-office[.]com1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4commerce-gov-pk.directt888[.]com1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4

Signature 5

Signature 6

mofa-gov-pk.directt888[.]com1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4

Signature 5

Signature 6

invitation-letter.govpk[.]info1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4

Signature 5

training.detru[.]info1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4msacn.ntcpk[.]net1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4

Signature 5

cabinet-division-pk.fia-gov[.]com1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4mailrta.mfagov[.]org1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4mailnavybd.govpk[.]net1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4pnwc.bol-north[.]com1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4sl-navy.office-drive[.]live1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4forecast[.]comsats-net[.]com1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4moma[.]comsats-net[.]com1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4srilanka-navy.lforvk[.]com1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4promotionlist[.]comsats-net[.]com1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4dgms.paknavy-gov[.]com1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4

Signature 5

ksew.kpt-gov[.]org1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4ministryofforeignaffairs-mofa-gov-pk.dytt88[.]org1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4bdmil.alit[.]live1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4navy-mil-bd.jmicc[.]xyz1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4paknavy.jmicc[.]xyz1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4paknavy[.]comsats[.]xyz1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a

62f40035834c9811b5dcbfa3cbe0fd4e51d8678f3aca8fb0644b0a3043a1a362

{rtf1 }

file.rtf

Signature 2

Signature 3

Signature 4

paknavy.paknavy[.]live1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4mofabn.ksewpk[.]com1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4srilankanavy.ksew[.]org1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a

60017e193cfd0df017eb8d0cc5f4bfc49593d90430a3e89a287f6afb83672236

{rtf1 }

file.rtf

Signature 2

Signature 3

Signature 4

maritimepakistan.kpt-pk[.]net1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4dgmp-paknavy.mod-pk[.]com1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a

4e3c4ea383e6ed5c00672e08adabe24fc142cd05c86830a79c15c90412a2f588

{rtf1 }

file.rtf

Signature 2

Signature 3

Signature 4

dgpr.paknvay-pk[.]net1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4cabinet-gov-pk.ministry-pk[.]net1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a

0826f532664b25a60d6ff5f98f82b2a618b86dda21f7badd6b5ea7165f5ed44d

{rtf1 }

file.rtf

Signature 2

Signature 3

Signature 4

careitservices.paknvay-pk[.]net1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4defencelk.cvix[.]live1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4mohgovsg.bahariafoundation[.]live1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4sppc.moma-pk[.]org1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4mailaplf.cvix[.]live1955c6914097477d5141f720c9e8fa44b4fe189e854da298d85090cbc338b35a{rtf1 }Signature 4afmat[.]techSpecific 404 scanningSignature 5aliyumm[.]techSpecific 404 scanningSignature 5almightyallah[.]liveSpecific 404 scanningSignature 5

Signature 6

apps.fia-gov[.]netSpecific 404 scanningSignature 5

Signature 6

ausibedu[.]orgSpecific 404 scanningSignature 5boket[.]techSpecific 404 scanningSignature 5btud[.]liveSpecific 404 scanningSignature 5cirt-gov-mm.fia-gov[.]netSpecific 404 scanningSignature 5

Signature 6

cluster.jotse[.]infoSpecific 404 scanningSignature 5comptes[.]techSpecific 404 scanningSignature 5cpanel.govpk[.]infoSpecific 404 scanningSignature 5dafpak[.]orgSpecific 404 scanningSignature 5defenec[.]netSpecific 404 scanningSignature 5

Signature 6

dev.govpk[.]infoSpecific 404 scanningSignature 5download-file[.]netSpecific 404 scanningSignature 5

Signature 6

dynat[.]techSpecific 404 scanningSignature 5endofmission.govpk[.]infoSpecific 404 scanningSignature 5fia-gov[.]netSpecific 404 scanningSignature 5focus.semain[.]techSpecific 404 scanningSignature 5found.neger[.]siteSpecific 404 scanningSignature 5gebre[.]techSpecific 404 scanningSignature 5

Signature 6

govpk[.]infoSpecific 404 scanningSignature 5hyat[.]techSpecific 404 scanningSignature 5intdtebangladesh.govpk[.]infoSpecific 404 scanningSignature 5jester.hyat.techSpecific 404 scanningSignature 5jotse[.]infoSpecific 404 scanningSignature 5leron[.]infoSpecific 404 scanningSignature 5livo.silvon[.]siteSpecific 404 scanningSignature 5mfa-govt[.]netSpecific 404 scanningSignature 5

Signature 6

mfacom[.]orgSpecific 404 scanningSignature 5mofa-gov-bd.fia-gov[.]netSpecific 404 scanningSignature 5mofa-gov-np.direct888[.]netSpecific 404 scanningSignature 5

Signature 6

mofa.govpk[.]infoSpecific 404 scanningSignature 5moittpk[.]orgSpecific 404 scanningSignature 5moon.tfrend[.]orgSpecific 404 scanningSignature 5mopf-gov-mm.direct888[.]netSpecific 404 scanningSignature 5

Signature 6

myanmar-gov-mm.fia-gov[.]netSpecific 404 scanningSignature 5myoffice.fia-gov[.]netSpecific 404 scanningSignature 5nbcot[.]infoSpecific 404 scanningSignature 5neger[.]siteSpecific 404 scanningSignature 5newoutlook[.]liveSpecific 404 scanningSignature 5note1582023.govpk[.]infoSpecific 404 scanningSignature 5ntcpk[.]infoSpecific 404 scanningSignature 5numpy[.]infoSpecific 404 scanningSignature 5

Signature 6

offshore.leron[.]infoSpecific 404 scanningSignature 5oprad[.]topSpecific 404 scanningSignature 5paknavy-gov[.]orgSpecific 404 scanningSignature 5paknavy-govpk[.]netSpecific 404 scanningSignature 5pnscpk[.]comSpecific 404 scanningSignature 5police-circular-gov-bd.fia-gov[.]netSpecific 404 scanningSignature 5police-gov-bd.donwloaded[.]comSpecific 404 scanningSignature 5police-gov-bd.fia-gov[.]netSpecific 404 scanningSignature 5semain[.]techSpecific 404 scanningSignature 5sezti[.]orgSpecific 404 scanningSignature 5shrtny[.]liveSpecific 404 scanningSignature 5silvon[.]siteSpecific 404 scanningSignature 5slic[.]liveSpecific 404 scanningSignature 5spark.126-com[.]liveSpecific 404 scanningSignature 5square.oprad[.]topSpecific 404 scanningSignature 5tni-mil[.]comSpecific 404 scanningSignature 5tni-mil[.]orgSpecific 404 scanningSignature 5tnial-mil[.]netSpecific 404 scanningSignature 5tref[.]techSpecific 404 scanningSignature 5webdisk.govpk[.]infoSpecific 404 scanningSignature 5webmail.govpk[.]infoSpecific 404 scanningSignature 5ww1.govpk[.]infoSpecific 404 scanningSignature 5ww25.govpk[.]infoSpecific 404 scanningSignature 5ww38.govpk[.]infoSpecific 404 scanningSignature 5www-police-gov-bd.direct888[.]netSpecific 404 scanningSignature 5

Signature 6

zed.shrtny[.]liveSpecific 404 scanningSignature 5

Source: https://blog.strikeready.com/blog/rattling-the-cage-of-a-sidewinder

Views: 2

Tags: DARK WEB