APT IOC Aggregator
Every MITRE ATT&CK group's indicators — MD5, SHA-1, SHA-256, domains, IPs — in one copy-paste window.
Full group index — every ATT&CK group with attributable indicators
What this dataset contains
125 MITRE ATT&CK groups mapped to malware-family indicators from abuse.ch ThreatFox and MalwareBazaar: 13,714 MD5, 13,093 SHA-1, 14,494 SHA-256, 7,362 domains and 6,540 IPs. Regenerated daily; last built Fri, 04 Sep 2026 16:30:38 GMT.
Only 47 of 125 groups have any group-attributable indicator. Families used by five or more distinct groups are commodity tooling (AdFind, CobaltStrike, Empire, Gh0stRAT, LaZagne, Mimikatz, …) and are counted separately — seeing one tells you little about which group is involved.
| Group | Origin | Attributable | Shared tooling |
|---|---|---|---|
| Akira | — | 307 | 0 |
| APT-C-36 | — | 607 | 1,845 |
| APT28 | Russia | 90 | 0 |
| APT29 | Russia | 312 | 188 |
| APT33 | Iran | 629 | 0 |
| APT38 | North Korea | 85 | 0 |
| APT41 | China | 3 | 1,145 |
| Cinnamon Tempest | China | 312 | 189 |
| Contagious Interview | North Korea | 12 | 0 |
| Dark Caracal | — | 135 | 0 |
| EXOTIC LILY | — | 243 | 0 |
| FIN6 | — | 3 | 188 |
| FIN7 | — | 8 | 188 |
| Fox Kitten | Iran | 8 | 0 |
| Gamaredon Group | Russia | 466 | 0 |
| GOLD SOUTHFIELD | — | 998 | 0 |
| Gorgon Group | Pakistan | 1,041 | 1,845 |
| Group5 | Iran | 575 | 663 |
| HEXANE | — | 9 | 0 |
| Kimsuky | North Korea | 335 | 1,466 |
| Lazarus Group | North Korea | 393 | 0 |
| LazyScripter | — | 550 | 1,845 |
| Magic Hound | Iran | 15 | 0 |
| Malteiro | — | 3 | 0 |
| Moonstone Sleet | North Korea | 4 | 0 |
| MuddyWater | Iran | 1,082 | 0 |
| Putter Panda | China | 4 | 0 |
| Sandworm Team | Russia | 9 | 188 |
| Scattered Spider | — | 998 | 0 |
| Sidewinder | India | 84 | 0 |
| SilverTerrier | — | 1,352 | 0 |
| Sowbug | — | 15 | 0 |
| Star Blizzard | Russia | 4 | 0 |
| Storm-0501 | — | 16 | 188 |
| Storm-1811 | — | 3 | 188 |
| TA2541 | — | 704 | 663 |
| TA505 | — | 345 | 188 |
| TA551 | — | 312 | 0 |
| TA577 | — | 71 | 0 |
| TA578 | — | 314 | 0 |
| The White Company | — | 42 | 0 |
| Transparent Tribe | Pakistan | 85 | 663 |
| Turla | Russia | 9 | 0 |
| UNC3886 | China | 47 | 0 |
| Water Galura | — | 4 | 0 |
| WIRTE | — | 272 | 0 |
| Wizard Spider | Russia | 17 | 188 |