Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
[BabbleLoader] A Deep Dive into EDR and Machine Learning-Based Endpoint Protection Evasion
Malware Families
Excerpt
Every now and then, some group innovates the Malware market, and it seems that the BabbleLoader developers are willing to do this, but not by discovering new evasion techniques, but rather by knowing how to use them to evade detection products that contain Machine Learning (AI) . This research will cover the following topics: Threat Intelligence information (up to the time of publication of this research), that is, which Malware is responsible for delivering this Loader, and…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | fa3d03c319a7597712eeff1338dabf92 | Medium | Score 55/100 | First seen |
| IP | 185.215.113.117 | High | Score 69/100 | First seen |
| SHA256 | a08db4c7b7bacc2bacd1e9a0ac7fbb91306bf83c279582f5ac3570a90e8b0f87 | Medium | Score 55/100 | First seen |
IOC Relationship Graph
Building graph…