G0099 - APT-C-36

APT-C-36 is a suspected South America espionage group that has been active since at least 2018. The group mainly targets Colombian government institutions as well as important corporations in the financial sector, petroleum industry, and professional manufacturing.

Author
agomez
Created
2023-08-14 15:40:47
Last updated
2026-02-07 18:52:34
Downloads
451183
Hostname indicators
3
URL indicators
12
Sample indicators
22

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

agostodc20.duckdns.org Hostname

modified 2026-10-16 12:39:33
Dcrat (Maltiverse Threat Observatory) · AsyncRAT (ThreatFox Abuse.ch) · APT-C-36 (Maltiverse) · Asyncrat (Maltiverse Threat Observatory) · Generic Malware (Maltiverse Threat Observatory)

doncu2030.duckdns.org Hostname

modified 2026-10-16 08:38:58
AsyncRAT (ThreatFox Abuse.ch) · Asyncrat (Maltiverse Threat Observatory) · APT-C-36 (Maltiverse)

147347ef63aab408c94872207bb58c16be1617fbfa3e10723933ddc9300a9c14 Sample

modified 2026-10-15 00:17:36
Apt-C-36 (Maltiverse)

6e33a5cbc63f1be88a7a4a03ee64c74e5a62a804852ed65567f0c66df7d22277 Sample

modified 2026-10-15 00:14:18
Apt-C-36 (Maltiverse)

7f0289f08df904da436b8e99605e74518c29f3321a10c7c0b37fced0f1e93202 Sample

modified 2026-10-14 00:39:31
Apt-C-36 (Maltiverse)

20a53f17071f377d50ad9de30fdddd320d54d00b597bf96565a2b41c15649f76 Sample

modified 2026-09-06 01:31:35
Apt-C-36 (Maltiverse)

http://dianportalcomco.com/bin/w.jpg URL

modified 2026-09-05 19:26:15
APT-C-36 (Maltiverse)

7be351516e7b50445ee35253b34d1b7d655d2e12ef5badfdbdc376197c5ca741 Sample

modified 2026-08-26 03:36:53
Apt-C-36 (Maltiverse)

http://ceoseguros.com/css/c.jpg URL

modified 2026-08-08 06:01:29
APT-C-36 (Maltiverse)

https://192.169.69.26/ URL

modified 2026-07-24 04:43:10
APT-C-36 (Maltiverse) · Generic Malware (Maltiverse Threat Observatory) · APT-C-36 (Maltiverse Threat Observatory)

http://ismaboli.com/js/i.jpg URL

modified 2026-07-16 12:29:36
APT-C-36 (Maltiverse)

https://152.200.146.245/ URL

modified 2026-07-15 02:01:46
APT-C-36 (Maltiverse Threat Observatory) · APT-C-36 (Maltiverse)

http://ismaboli.com/dir/i.jpg URL

modified 2026-07-15 01:41:47
APT-C-36 (Maltiverse)

http://192.169.69.26:8080/ URL

modified 2026-07-14 07:04:25
Xworm (Maltiverse Threat Observatory) · APT-C-36 (Maltiverse) · Njrat (Maltiverse Threat Observatory) · Generic Malware (Maltiverse Threat Observatory)

03b0e67b65740307c5f7109587ff3218aa803c0998a23f83f8790fd9a1e0fb47 Sample

modified 2026-07-14 00:27:11
Apt-C-36 (Maltiverse)

http://dianmuiscaingreso.com/css/w.jpg URL

modified 2026-07-14 00:12:50
APT-C-36 (Maltiverse)

http://192.169.69.26/ URL

modified 2026-07-13 21:15:53
Xworm (Maltiverse Threat Observatory) · APT-C-36 (Maltiverse) · Njrat (Maltiverse Threat Observatory) · Generic Malware (Maltiverse Threat Observatory)

http://diangovcomuiscia.com/media/a.jpg URL

modified 2026-07-13 19:24:32
APT-C-36 (Maltiverse) · Malware Download (Abuse.ch)

1a1153a046f1e8bd1a3859e569f8565d4d18447f22fde458adb2643e486b4008 Sample

modified 2026-04-13 01:29:53
Apt-C-36 (Maltiverse)

5d93617121f54b46fd9b261e1da8b9f812258eda5ae1ea41c9ed66f9e7a19862 Sample

modified 2026-03-22 01:20:19
Apt-C-36 (Maltiverse)

RESPEC1.JS Sample

modified 2025-12-19 03:26:56
Apt-C-36 (Maltiverse) · Generic.Malware (MalwareBazaar Abuse.ch)

97d36f2464f172c09b48513adc9a5fd9b5dc74645841db4500b1a63cd6f1bd3f.vbs Sample

modified 2025-12-16 14:45:50
Apt-C-36 (Maltiverse)

121b8d1163a2af9546629bc82c0031de6d008f654833d3a11b25e750e0d05649 Sample

modified 2025-10-10 12:13:18
APT-C-36 (Maltiverse)

http://ceoempresarialsas.com/js/d.jpg URL

modified 2025-03-05 22:32:21
APT-C-36 (Maltiverse)

http://ceoseguros.com/css/d.jpg URL

modified 2025-03-02 12:37:48
APT-C-36 (Maltiverse) · Malware Download (Abuse.ch)

b1b114c09344edc0be3459e3a93f47ef584df37b58500b7f420f8232e7cac6f5.vbs Sample

modified 2025-02-14 16:09:12
Apt-C-36 (Maltiverse) · njrat (MalwareBazaar Abuse.ch) · Backdoor (VM-Ray) · Keylogger (VM-Ray) · Injector (VM-Ray)

2547c7a4c22264ffa3864bd145c317cb74f6083768f1a64fc4115c564183f71b Sample

modified 2023-04-27 00:24:44
Apt-C-36 (Maltiverse)

cutty.ly Hostname

modified 2023-04-22 14:55:31
Apt-C-36 (Maltiverse)

9d691f77914108232b4f6c36ae4e2a8d2a0efece5874044cd24b6668e5623a7c Sample

modified 2023-03-19 07:49:42
Apt-C-36 (Maltiverse)

c7cc354744f7e9ec5a76a1b7dfb3fe13d09724bb0e7b4ac8d1dea0a2cb60cdf9 Sample

modified 2023-03-19 07:49:41
Apt-C-36 (Maltiverse)

fd6f54a4fab53738cccaee893bbdbd6d8443f4545a9b36a61449f1a7b8566cf9 Sample

modified 2023-03-19 07:49:41
Apt-C-36 (Maltiverse)

dfc497c7cb4cac21d5b4760dcc9df8c4379e7f4290a8ff06265225704819761c Sample

modified 2023-03-19 07:49:41
Apt-C-36 (Maltiverse)

9a2e865fa85a61a9c7cf364d17e3034b41fb851f0199033abe6a0d5585916c6e Sample

modified 2023-03-19 07:49:41
Apt-C-36 (Maltiverse)

2dd4b645155f01cf1f0a5b38addeceda5068bc58cdd2d8a6b0376aa7787d2122 Sample

modified 2023-03-19 07:49:40
Apt-C-36 (Maltiverse)

5d910ee5697116faa3f4efe230a9d06f6e3f80a7ad2cf8e122546b10e34a0088 Sample

modified 2023-03-19 07:49:40
Apt-C-36 (Maltiverse)

e3881955773454d4617093e47eb8f6578c3047595f5950e89b29731626954839 Sample

modified 2023-03-19 07:49:40
Apt-C-36 (Maltiverse)

e98f7351f84480a4a0288f029031250142f46842d60ea87e8f85e6960f73b188 Sample

modified 2023-03-19 07:49:40
Apt-C-36 (Maltiverse)