>samit_hota
Back to IOCs
41 indicators

SmartApeSG — Indicators of Compromise

Samit Hota·
#ioc#smartapesg

Overview

Indicators of compromise associated with SmartApeSG. 41 indicators listed below.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
urlhttps://aurorapavilion.top/acl/trace-serializerJuly 20, 2026100%
domainaurorapavilion.topJuly 20, 2026100%
urlhttps://aurorapavilion.top/acl/principal-core.jsJuly 20, 2026100%
urlhttps://mv2group.com/meta.google.comJuly 17, 2026100%
domainmv2group.comJuly 17, 2026100%
urlhttps://cedaristhmus.top/public/scope-cookie.jsJuly 17, 2026100%
urlhttps://cedaristhmus.top/public/middleware-sessionstoreJuly 17, 2026100%
domaincedaristhmus.topJuly 17, 2026100%
urlhttps://cedaristhmus.top/public/callback-asset.jsJuly 17, 2026100%
urlhttps://amberobservatory.top/public/scope-cookie.jsJuly 17, 2026100%
domainamberobservatory.topJuly 17, 2026100%
urlhttps://amberobservatory.top/public/middleware-sessionstoreJuly 17, 2026100%
urlhttps://amberobservatory.top/public/callback-asset.jsJuly 17, 2026100%
urlhttps://copperlandmark.top/claims/redirect-state.jsJuly 17, 2026100%
domaincopperlandmark.topJuly 17, 2026100%
urlhttps://copperlandmark.top/claims/realm-fetch.jsJuly 17, 2026100%
urlhttps://copperlandmark.top/claims/metrics-bundleJuly 17, 2026100%
urlhttps://emberlattice.top/claims/redirect-state.jsJuly 16, 2026100%
urlhttps://emberlattice.top/claims/metrics-bundleJuly 16, 2026100%
urlhttps://emberlattice.top/claims/realm-fetch.jsJuly 16, 2026100%
urlhttps://emberlattice.top/callback/signin-validatorJuly 16, 2026100%
domainemberlattice.topJuly 16, 2026100%
urlhttps://emberlattice.top/callback/health-sandbox.jsJuly 16, 2026100%
urlhttps://kblaa.com/gfont.ttfJuly 15, 2026100%
domainkblaa.comJuly 15, 2026100%
urlhttps://granitehearth.top/status/profile-runtime.jsJuly 15, 2026100%
urlhttps://granitehearth.top/status/status-parserJuly 15, 2026100%
domaingranitehearth.topJuly 15, 2026100%
urlhttps://granitehearth.top/status/health-effect.jsJuly 15, 2026100%
urlhttps://alabastercompass.top/public/callback-stylesheet.jsJuly 14, 2026100%
urlhttps://hazelcitadel.top/public/callback-stylesheet.jsJuly 14, 2026100%
urlhttps://hazelcitadel.top/public/refresh-cookieJuly 14, 2026100%
domainhazelcitadel.topJuly 14, 2026100%
urlhttps://hazelcitadel.top/public/throttle-sandbox.jsJuly 14, 2026100%
urlhttps://alabastercompass.top/public/refresh-cookieJuly 14, 2026100%
domainalabastercompass.topJuly 14, 2026100%
urlhttps://alabastercompass.top/public/throttle-sandbox.jsJuly 14, 2026100%
urlhttps://moonlitprovince.top/router/verify-buildJuly 13, 2026100%
urlhttps://moonlitprovince.top/router/handler-asset.jsJuly 13, 2026100%
domainmoonlitprovince.topJuly 13, 2026100%
urlhttps://jadeworkshop.top/router/user-thread.jsJuly 13, 2026100%

Related content

IOCs

5.t Downloader — Indicators of Compromise

IOCs

ACR Stealer — Indicators of Compromise

IOCs

AdaptixC2 — Indicators of Compromise

IOCs

AdWind — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call