Diamond Model
Adversary
Infrastructure(6)
Capability
Victim
5W+H Threat Analysis
Analysis unavailable
Indicators of Compromise
Indicators of Compromise93
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | inder.exiaodou.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | qsrt.cn indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | mail.mybmtest999.net indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| SHA256 | bdf6f9515e41f43e99d29d762d5e8980a8ba7c971e98c2f49fcc6dd28413abf7 botnetfile-hashmalware | High | 86 | Jun 5, 26 |
| Domain | 172-235-56-113.plesk.page aptespionagemalware | High | 72 | Jun 6, 26 |
| SHA1 | 8f7801520ec84f9ef1c203bb5fe57a3ffa0a6955 aptespionagefile-hash | High | 72 | Jun 6, 26 |
| Domain | laiuatexqwgov.cc indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | exiaodou.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | googlle.xin indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | laiuatexqwgg.bond indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | hudnz.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | faoith.com aptespionagemalware | High | 72 | Jun 6, 26 |
| Domain | lncometaxindia.top indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | taxation.imedikate.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | india.imedikate.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| IP | 149.248.11.71 active scanactive scanningagent | High | 79 | Feb 11, 26 |
| Domain | app.zgfzvip.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | laiuatexqwgg.top indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | betmmm.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | h5.zgfzvip.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | fiveworkscorp.com aptespionagemalware | High | 72 | Jun 6, 26 |
| SHA1 | eb949ee48326e2f07c7755f573de6ca25156c619 file-hashindicatormalware | High | 72 | Jun 6, 26 |
| SHA1 | b87c2c37d10a07b0e5370ce3e273bc471dbed867 file-hashindicatormalware | High | 72 | Jun 6, 26 |
| Domain | zgfzvip.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | sgov.xin indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | sgevip.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | system32.sbs indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | service.systemsvcs.com aptespionagemalware | High | 72 | Jun 6, 26 |
| Domain | zzzwin.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | incometaxonline.my.id indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | yda.56626648.xyz indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | laiutexqwgua.cc indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | sgeshjys.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | natsupport.net aptespionagemalware | High | 72 | Jun 6, 26 |
| Domain | mybmtest999.net indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | laiutexqwgub.cc indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | mail.thesugarista.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | download.zgfzvip.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | incometaxindia.xin indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | laiutexqwgun.cc indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | e-bandaosports.cn indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | performanceviewtools.com aptespionagemalware | High | 72 | Jun 6, 26 |
| Domain | in.exiaodou.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | sxzqios.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | olofopbwgxgodt.net indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | uwqlvza.cn indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | winii.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | winfoacacorp.com aptespionagemalware | High | 72 | Jun 6, 26 |
| Domain | gxapi.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | kedsw2366.cn indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | laiutexqwguc.cc indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | piuygbd.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | instengneededinstengacross.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | manbiripoint.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | gova.bar indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | taxeiit8.cn indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | 56626648.xyz indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | exsular.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | wushi.exiaodou.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | azdatastore.workers.dev aptespionagemalware | High | 72 | Jun 6, 26 |
| SHA1 | a08cd612fe7487f512171b05be952c9516057751 aptespionagefile-hash | High | 72 | Jun 6, 26 |
| Domain | xfofaow.cn indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | calixcloudinfo.com aptespionagemalware | High | 72 | Jun 6, 26 |
| Domain | in.aogvewps.top indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | gyhtdes.top indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | laiuatexqwgg.xyz indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | laiuatexqwgg.sbs indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | aogvewps.top indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | qin.exiaodou.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | telem.top indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | dsgrezb.cn indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | haiwang.exiaodou.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | devs.calixcloudinfo.com aptespionagemalware | High | 72 | Jun 6, 26 |
| Domain | djxentertainment.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | biwgg.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | systemsvcs.com aptespionagemalware | High | 72 | Jun 6, 26 |
| Domain | msazure.azdatastore.workers.dev aptespionagemalware | High | 72 | Jun 6, 26 |
| Domain | 1.gdgzxykj.top indicatormalwarenetwork | High | 74 | Jun 6, 26 |
| Domain | kitfloor.org aptespionagemalware | High | 72 | Jun 6, 26 |
| Domain | bititer.org aptespionagemalware | High | 72 | Jun 6, 26 |
| Domain | laiuatexqwgu.cc indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | indiacy.xyz indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | thesugarista.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | learn.thesugarista.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| URL | https://www.volexity.com/blog/2026/06/04/verdantbamboo-just-another-brickstorm-in-the-firewall aptespionagemalware | High | 72 | Jun 6, 26 |
| Domain | mggsjvip.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | laiuatexqw.cc indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | sgeshgold.vip indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | ng.incometaxonline.my.id indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | jhmrrru.cn indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| Domain | barannclinic.com aptespionagemalware | High | 72 | Jun 6, 26 |
| Domain | bjmacrc.com indicatormalwarenetwork | High | 72 | Jun 6, 26 |
| IP | 45.13.227.106 aptespionagemalware | High | 72 | Jun 6, 26 |
IOC Relationship Graph
IOC Relationship Graph93 total IOCs
DomainSHA256SHA1IPURL