Indicators of Compromise

URL

TLP:CLEAR

http://www.info-spb.com/worldnews/mfa/uz/03.02.2016.rar

NetTraveler payload URL

70% confidence

Added

2026-05-06

IPv4 Address

TLP:CLEAR

103.231.184.163

NetTraveler C&C

70% confidence

Added

2026-05-06

IPv4 Address

TLP:CLEAR

98.126.38.107

NetTraveler C&C

70% confidence

Added

2026-05-06

URL

TLP:CLEAR

http://www.interfaxru.com/html/rostechnologii/20160420.rar

NetTraveler payload URL

70% confidence

Added

2026-05-06

URL

TLP:CLEAR

http://www.info-spb.com/analiz/voennye_kommentaria/n148584.rar

NetTraveler payload URL

70% confidence

Added

2026-05-06

URL

TLP:CLEAR

http://www.info-spb.com//worldnews/almaz-antey/no.15.02.2016.rar

NetTraveler payload URL

70% confidence

Added

2026-05-06

URL

TLP:CLEAR

http://www.info-spb.com/worldnews/mfa/ua/2016-02-16.zip

NetTraveler payload URL

70% confidence

Added

2026-05-06

IPv4 Address

TLP:CLEAR

103.231.184.164

NetTraveler C&C

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

www.info-spb.com

NetTraveler C&C and payload hosting site

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

www.tassnews.net

NetTraveler C&C

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

www.riaru.net

NetTraveler C&C

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

www.voennovosti.com

NetTraveler C&C

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

www.mogoogle.com

NetTraveler C&C

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

www.interfaxru.com

NetTraveler C&C and payload hosting site

70% confidence

Added

2026-05-06