Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Domainwww.controlium.netMediumIP181.225.233.172HighSHA256593f8ed9319fd4e936a36bc6d0f163b9d43220e61221801ad0af8b1db35a0de5HighIP149.154.175.54MediumSHA1e10361a11f8a7f232ac3cb2125c1875a0a69a3e4Medium