Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Domainabb1.lifeHighDomainchcp.comMediumSHA256fe4d62a17bbcdfb9f350a1e00e3562dcd97c03493e6ad8dd2b3b0b9909e32757HighDomainmicrosoftstart.orgHighDomainartemis-rat.comMediumDomainwww.galapagosdesign.comHighDomainfontfabrik.comHighDomainwww.jiyu-kobo.co.jpMedium