Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Malware Families
Excerpt
https://www.darktrace.com/blog/darktrace-malware-analysis-unpacking-snappybee Darktrace Malware Analysis: Unpacking SnappyBee By Nathaniel Bill Published: 2026-02-03 · Archived: 2026-10-10 02:01:58 UTC Introduction The aim of this blog is to be an educational resource, documenting how an analyst can perform malware analysis techniques such as unpacking. This blog will demonstrate the malware analysis process against well-known malware, in this case SnappyBee. SnappyBee (also…
Read the original report →Diamond Model
Adversary(5)
Infrastructure(1)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | b2b617e62353a672626c13cc7ad81b27f23f91282aad7a3a0db471d84852a9ac | High | Score 67/100 | First seen |
| SHA256 | 1a38303fb392ccc5a88d236b4f97ed404a89c1617f34b96ed826e7bb7257e296 | High | Score 67/100 | First seen |
| SHA256 | 25b9fdef3061c7dfea744830774ca0e289dba7c14be85f0d4695d382763b409b | High | Score 67/100 | First seen |
| URL | tls.readthedocs.io/projects/api/en/v2.28.4/api/file/arc4_8h/#_CPPv418mbedtls_arc4_cryptP20mbedtls_arc4_context6size_tPKhPh | High | Score 67/100 | First seen |
IOC Relationship Graph
Building graph…