Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
a525e5d42676db2bf96741789c99f5cf081da81f33522622d57af9619a828e2f
4e18f606f7a31ffbea632ceaffad77689f810a3cde26d2a913d4530eaae5c5d1