Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Malware Families
Excerpt
e-Fax Phish Analysis | Malware Analysis Malware Analysis e-Fax Phish Analysis Jan 21, 2024 Randy McEoin Phishing threat actors will engage with your users in order to persuade them to download and execute malware. Here we analyse a phish that our user interacted with and clicked on the URL provided. Thankfully our security tools blocked the download. The Phish The initial phish did not contain any URLs or attachments. Instead they are prompting for a reply. From: 'Peter…
Read the original report →Diamond Model
Adversary
Infrastructure(5)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →11 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | f61e953b18744be06991184c5d58a618ebcdb53c4a64ed0236e9e9300eb2aacf | Medium | Score 53/100 | First seen |
| SHA256 | 2fc9c32a7a88ad193cf3d24d25a93ddec1f20141a2d50fd68f5c77115abff5e8 | Medium | Score 53/100 | First seen |
| URL | https://nrgtik.mx/wp-content/uploads/agent1.ps1 | High | Score 58/100 | First seen |
| URL | https://nrgtik.mx/wp-content/uploads/agent3.ps1 | High | Score 58/100 | First seen |
| URL | https://nrgtik.mx/wp-content/uploads/wp-content.php | High | Score 58/100 | First seen |
| SHA256 | dd4612be6e9a57ea8b9ac95cfc1db5bf7b4b05b3ac837c582cddbd7f1e7aed93 | Medium | Score 53/100 | First seen |
| URL | https://docs2.e-fax.org/file_download/20053234343365/eFax_statement_Jan_2024.pdf | High | Score 58/100 | First seen |
| URL | https://nrgtik.mx/wp-content/uploads/helper1.exe | High | Score 58/100 | First seen |
| SHA256 | ace2a7812874a84b32590f440f9c4d9d99567e12cb86f0ba598e5e65aa4948c0 | Medium | Score 53/100 | First seen |
| SHA256 | e3a406607f9de0b40935b0838b40f60dee58f63e69490f7dd9320d0e3293153c | Medium | Score 53/100 | First seen |
| SHA256 | 9b1a84b656f463c30a9e69bdd88c8e268354b3b3eccdd72725779517c016e464 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…