IoC Investigation

https://services.google.com/fh/files/misc/apt44-unearthing-sandworm.pdf

URL IN DATABASE

URL · threat 0.50 · 10× seen · 0 datasets · ATT&CK · last seen 5d ago

🔄 Pivot:📁 ATT&CK

Threat Score

0.50

Sightings

10
0 sources

Detected Type

URL

Enrichments

0

Related IoCs

20
URL / Domain Dossier → Full OSINT Pivot + Case Create Case Takedown Export STIX/MISP ← Browse All

Domain / URL Intelligence

Hostservices.google.com
Registrar-
Org-
Abuse Contact-
Country-
DNS / WHOIS Dossier DNS Audit Passive DNS ↗ Subdomains (crt.sh)

Seen in Datasets (0)

Not linked to any dataset.

OSINT Pivots

Full OSINT (30+ lookups) ↗ VirusTotal ↗ urlscan.io ↗ SecurityTrails ↗ crt.sh ↗ ThreatFox ↗ URLhaus Link Analysis ↗ OpenSanctions

Related Indicators (20)

Indicators sharing the same category.

IndicatorTypeCategoryThreat
https://attack.mitre.org/techniques/T1584/00… URL ATT&CK investigate →
https://attack.mitre.org/techniques/T1039 URL ATT&CK investigate →
https://attack.mitre.org/techniques/T1001 URL ATT&CK investigate →
https://www.geeksforgeeks.org/inter-process-… URL ATT&CK investigate →
https://attack.mitre.org/techniques/T1559 URL ATT&CK investigate →
https://attack.mitre.org/techniques/T1565 URL ATT&CK investigate →
https://attack.mitre.org/techniques/T1068)) URL ATT&CK investigate →
https://attack.mitre.org/techniques/T1564/01… URL ATT&CK investigate →
https://attack.mitre.org/techniques/T1562/00… URL ATT&CK investigate →
https://cloud.google.com/blog/topics/threat-… URL ATT&CK investigate →
https://techcommunity.microsoft.com/t5/core-… URL ATT&CK investigate →
https://cdn.logic-control.com/docs/scadafenc… URL ATT&CK investigate →
https://www.crowdstrike.com/blog/targeted-dh… URL ATT&CK investigate →
https://thehackernews.com/2022/05/avoslocker… URL ATT&CK investigate →
https://www.crowdstrike.com/blog/how-doppelp… URL ATT&CK investigate →
https://www.mandiant.com/resources/chasing-a… URL ATT&CK investigate →
https://blogs.blackberry.com/en/2022/02/thre… URL ATT&CK investigate →
https://www.fortinet.com/blog/psirt-blogs/fg… URL ATT&CK investigate →
https://attack.mitre.org/techniques/T1562/00… URL ATT&CK investigate →
https://attack.mitre.org/techniques/T1157 URL ATT&CK investigate →

Copy as STIX 2.1 

{
    "type": "indicator",
    "spec_version": "2.1",
    "id": "indicator--e336275f-912a-4dc3-46d5-000086e90b3c",
    "created": "2026-08-12T15:11:37Z",
    "modified": "2026-08-12T15:11:37Z",
    "name": "URL: https://services.google.com/fh/files/misc/apt44-unearthing-sandworm.pdf",
    "pattern": "[url:value = 'https://services.google.com/fh/files/misc/apt44-unearthing-sandworm.pdf']",
    "pattern_type": "stix",
    "valid_from": "2026-08-12T15:11:37Z",
    "labels": [
        "att&ck"
    ],
    "confidence": 50
}

Linked Cases (0)

Not linked to any case yet.

+ Add to Case Create Alert
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center