Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
8 IOCs
Gray Rabbits and the Tale of a One-Click Backdoor
Threat Actors
Malware Families
Excerpt
Gen Blogs | Gray Rabbits and the Tale of a One-Click Backdoor Blog Home News Insights People & Impact Search Blog Home Insights Research Gray Rabbits and the Tale of a One-Click Backdoor Research Gray Rabbits and the Tale of a One-Click Backdoor One click. Three critical failures. One backdoor. Alexandru-Cristian Bardaș Threat Analysis Engineer Published September 10, 2026 Read time 26 Minutes Written by Alexandru-Cristian Bardaș Threat Analysis Engineer Published…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(3)
Capability(4)
Victim
Indicators of Compromise
Open the mindmap →8 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | d7a3c7eb94edc0e020f74c678743d71d61e944634aade4a67a96c3589e828b3a | High | Score 79/100 | First seen |
| SHA256 | 749160a2f20f82744026719cf72e483595c6aad718efa74d675a98662e02422e | High | Score 79/100 | First seen |
| SHA256 | 29c7ee41d0cc9e07d981e451df56d0c3d37c41ac4ec10c7b516cc033ee397a63 | High | Score 79/100 | First seen |
| IP | 8.218.50.207 | High | Score 58/100 | First seen |
| Domain | mail.uaiubifas.top | High | Score 58/100 | First seen |
| CVE | CVE-2026-51990 | Medium | Score 51/100 | First seen |
| Domain | noht1ng.top | High | Score 58/100 | First seen |
| CVE | CVE-2021-38003 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…