Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Malware Families
Excerpt
Domino Supply Chain Analysis Hello Geeks, I have decided to spend my time reading some reports and trying to do my own analysis to upgrade my threat intel skills so Domino was a good start for me Overview In the last week IBM X-force team discovered a new threat and they call it “Domino” This malware was developed by ITG14(FIN7) and this backdoor is using now by ITG23 cyber criminals who developed Conti Ransomware and trickbot , they observed that this backdoor is using by…
Read the original report →Diamond Model
Adversary(2)
Infrastructure(5)
Capability(5)
Victim
Indicators of Compromise
Open the mindmap →9 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 94.158.247.72 | High | Score 58/100 | First seen |
| IP | 5.182.37.118 | High | Score 58/100 | First seen |
| MD5 | 2cc79806701f1a6e877c29b93f06f1bb | Medium | Score 53/100 | First seen |
| IP | 88.119.175.124 | High | Score 58/100 | First seen |
| MD5 | 039b547217d35ee6e0e9efe0df360d79 | Medium | Score 53/100 | First seen |
| SHA256 | de9b3c01991e357a349083f0db6af3e782f15e981e2bf0a16ba618252585923a | Medium | Score 53/100 | First seen |
| IP | 185.225.17.202 | High | Score 58/100 | First seen |
| SHA256 | 4ed1348a9a1a6917dbf77415c41cf7d19552394bcf76586e81516502c39d407c | Medium | Score 53/100 | First seen |
| IP | 45.67.34.236 | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…