Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
8 IOCs
Apache ActiveMQ Exploit Leads to LockBit Ransomware
Threat Actors
Malware Families
Excerpt
Apache ActiveMQ Exploit Leads to LockBit Ransomware - The DFIR Report Read our latest report Click here X Public Reports Products Products Overview Threat Intel Threat Feed Private DFIR Reports All Intel Active Defense DFIR Labs Case Artifacts - Detection Pack AI Training Ground - bruteratel From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion Read More - dragonforce Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs Read More…
Read the original report →Diamond Model
Adversary(2)
Infrastructure(2)
Capability(8)
Victim
Indicators of Compromise
Open the mindmap →8 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | d9c888bde81f19f3dc4f050d184ffa6470f1a93a2b3b10b3cc2d246574f56841 | Medium | Score 53/100 | First seen |
| SHA256 | c8646cfb574ff2c6f183c3c3951bf6b2c6cf16ff8a5e949a118be27f15962fae | Medium | Score 53/100 | First seen |
| SHA256 | 8ceee89550c521ba43f59d24ba53a22a3b69ead0fce118508d0a87a383d6a7b6 | Medium | Score 53/100 | First seen |
| IP | 166.62.100.52 | High | Score 68/100 | First seen |
| IP | 166.62.100.62 | High | Score 69/100 | First seen |
| SHA256 | 87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55 | Medium | Score 53/100 | First seen |
| CVE | CVE-2023-46604 | High | Score 84/100 | First seen |
| SHA256 | 722fff8f38197d1449df500ae31a95bb34a6ddaba56834b13eaaff2b0f9f1c8b | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…