IOC Radar
DomainMediumSignal 83/100

tienes.ru

Location
UkraineUkraine
First Seen
Apr 13, 2025
Last Seen
Jun 20, 2026
Apr 13
First Seen
439d ago
Jun 20
Last Seen
6d ago
11
Reports
source reports
83%
Confidence
medium
Found in 11 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
83%
Signal Score
83 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

52 techniques

Feed Intelligence Summary

11 reports83% confidence
11
Source reports
83%
Confidence score
Category tags
abuseactive scanningaerospace & defenseangry likho aptaptapt groupapt groupsattackbotnetbrickstormbrute forcec2 addressc2 communicationc2 registrycivil servicescloudcloudflare tunnelscommand and controlcommand executioncommunication protocolcommunications networkscredential accesscredential harvestingcredential stuffingcritical infrastructurecryptocurrency miningdata encryptiondata exfiltrationdead drop resolverdefensedefense contractingdefense logisticsdefense systemsdefense technologydistributed attacksdownloaderdropperdropper malwareemergency servicesenergy systemseuropeeurope/asiaevasive infrastructureextortionfinancial systemsftpgamaredongovernment facilitiesgovernment sectorgovernment technologyhttp scannerhttpsindicatorinterlockkimsukylnk dropperlumma stealermalicious activitymalicious powershell activitymalicious softwaremalwaremalware attacksmalware distributionmalware downloadmilitary operationsnational securitynetworknetwork probingnetwork reconnaissancenetwork scanningnetwork securitypassword attackphishingphishing attackprocess injectionprotocol exploitationpublic administrationpublic infrastructurepublic policyransomwareratrdpwrapreconnaissanceregistry modificationregulatory agenciesremote accessresearchedrst cloudrussiarussian federationscripting attacksshadowpad ransomwaresocial engineeringsoftware vulnerabilitiesspearphishingsql server exploitationssh attacksystem disruptiont1005t1016t1021t1021.002t1021.004t1027t1036t1040t1041t1046t1053t1055t1057t1059t1059.001t1059.005t1068t1071t1071.001t1078t1078.002t1086t1105t1110t1110.002t1133t1134t1190t1192t1204t1204.002t1486t1490t1496t1499.002t1499.003t1547t1547.001t1555t1555.003t1565t1566t1566.001t1566.002t1566.003t1573t1588t1592t1595t1595.001t1595.002t1595.003targeted attacktelnet threatthreat actorthreatstransportation networksukraineukraine targetingvshellwater systemsweb trafficwineloader

Activity Timeline

1 total obs
Jun 20Jun 20

Threat Activity Heatmap

· Peak: 2026-06-20
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
83
SIGNAL
Signal Score
83%
Confidence
11
Reports
First seenApr 13, 2025
Last seenJun 20, 2026

VirusTotal

Not checked

WHOIS

domain rank
-1
raw
Create date: 2024-11-18 00:00:00 Domain name: tienes.ru Expiry date: 2025-12-19 00:00:00 Name server 1: ns2.reg.ru Name server 2: ns1.reg.ru Query time: 2024-11-19 23:28:46
references
https://web-assets.esetstatic.com/wls/en/papers/white-papers/gamaredon-in-2024.pdf, https://harfanglab.io/insidethelab/gamaredons-pterolnk-analysis/, https://x.com/500mk500/status/1910949938625737183
subdomains count
7

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 6 days ago
Appeared in 11 threat reports