Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Malware Families
Excerpt
Auto Dealership Supply Chain Attack | Malware Analysis Malware Analysis Auto Dealership Supply Chain Attack Mar 13, 2025 Randy McEoin Summary Over 100 auto dealerships were being abused compliments of a supply chain attack of a shared video service unique to dealerships. When active, the attack presented dealership visitors with a ClickFix webpage which led to a SectopRAT malware. ClickFix When the user visited any of the over 100 dealerships, there was a chance that a…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 1a34c9b4500cf7859c36c102209902202fb7188aca1ba759f2d5018bf2655cc1 | Medium | Score 53/100 | First seen |
| SHA256 | 25063bd7b2f8f5a6610e50db947de99c0e5942991b55dac40e629ee1827b8ecd | Medium | Score 53/100 | First seen |
| URL | http://92.255.85.36:9000/wbinjget | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…