Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
12 IOCs
[Amadey] Targeted Analysis of its Campaign’s Kill Chain, String and Traffic Encryption Algorithm, and Download of Additional Modules
Threat Actors
Malware Families
Excerpt
A while back, I wrote a post about my BabbleLoader research (which you can access here ), where in addition to reverse engineering its defense evasion capabilities, I also analyzed the public intelligence available on how the sample I was analyzing had been delivered to victims. It was at this point that, through UnpacMe , in partnership with Loader Insight Agency , I was able to confirm that the BabbleLoader sample I had in my hands was delivered through an infrastructure…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(2)
Capability(4)
Victim
Indicators of Compromise
Open the mindmap →12 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 4da19f0ba38dd81868970b13a5e36527d7b0c566237fa1e765293a3be4cf896e | Medium | Score 55/100 | First seen |
| Domain | datahouse.ru | High | Score 61/100 | First seen |
| SHA256 | a1a79febe636f6af95ca527bf37321a329f37bc2524414376f2727f4d9bd17c1 | Medium | Score 55/100 | First seen |
| MD5 | 4a2b1d794e79a4532b6e2b679408d2bb | Medium | Score 55/100 | First seen |
| SHA256 | ec69acca4817e9e938a14043861bad3a1cb71e3530043448389a19eb6d3be317 | Medium | Score 55/100 | First seen |
| MD5 | 2eabe9054cad5152567f0699947a2c5b | Medium | Score 55/100 | First seen |
| MD5 | 646167cce332c1c252cdcb1839e0cf48 | Medium | Score 55/100 | First seen |
| MD5 | 006700e5a2ab05704bbb0c589b88924d | Medium | Score 55/100 | First seen |
| SHA256 | 8c1815ea20953987b173bfe13e264143f45f3b7e874d9184f11bb51d15685c31 | Medium | Score 55/100 | First seen |
| MD5 | 1db72c5832fb71b29863ccc3125137a0 | Medium | Score 55/100 | First seen |
| SHA256 | 99a0b36329cf23d11c78334f513ed0cd7c3c22b997d556e91399c2d627d5d8a6 | Medium | Score 55/100 | First seen |
| IP | 185.215.113.117 | High | Score 69/100 | First seen |
IOC Relationship Graph
Building graph…