Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Excerpt
Introduction this blog will discuss how SnakeKeyLogger uses Advpack.dll to drop and execute his main payload. Snake Keylogger slithers past traditional defenses using social engineering and technical trickery. This post delves into the specifics of its phishing email tactics and malicious macro exploitation, providing valuable insights for security professionals and tech-savvy users to bolster their defenses against this evolving threat. About The specimen the sample we have…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | b1305f33fd9b834fe7a926f1253bb1e97ff4ddd669c8051feba989f819cd667a | Medium | Score 53/100 | First seen |
| SHA256 | ee497723ea8f25b3732829db0aa09f0502607505e816e8d9997f070c4222c98c | Medium | Score 53/100 | First seen |
| SHA256 | 8af7f091c0c869006be53ef947b10ee18ddf6a2c2870a9b163484a372f94b90a | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…