Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
35 IOCs

Harvester APT

APOPHIS
APOPHIS
Published February 23, 2025Original Report

Threat Actors

Excerpt

Sectors Targeted : Utilities Finance & Insurance Healthcare & Social Assistance Public Administration Telecommunications National Security Geographic Focus : Ukraine South Asia Afghanistan U.S. Virgin Islands Hong Kong Associated Groups : Harvester shares overlap in tactics with APT29 (Russia-linked), APT41 (China-linked), and Sandworm (Russia-linked), suggesting possible collaboration or inspiration from established state-sponsored actors. Key Features and Attack…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAPT29APT41SandwormINFRASTRUCTUREunknownCAPABILITYunknownVICTIMunknown
Adversary(3)
Infrastructure
Capability
Victim

Indicators of Compromise

Open the mindmap →

35 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA13c1951aa709a79ed0654daa679bc71eed4a32941MediumScore 53/100First seen
SHA256582b21409ee32ffca853064598c5f72309247ad58640e96287bb806af3e7bedeMediumScore 53/100First seen
SHA15210700004172eeb74655a62824f3bb6ab7667f5MediumScore 53/100First seen
SHA188306961209d423c7b296b7dc469b186bbe3e178MediumScore 53/100First seen
SHA25697551bd3ff8357831dc2b6d9e152c8968d9ce1cd0090b9683c38ea52c2457824MediumScore 53/100First seen
SHA13539bee7feb13fcda5be45dffc6da3e635a59d90MediumScore 53/100First seen
MD51f38e3218443cba2994ba346fa339166MediumScore 53/100First seen
SHA256fd9fc13dbd39f920c52fbc917d6c9ce0a28e0d049812189f1bb887486caedbebMediumScore 53/100First seen
SHA196f6b9e1dff448ea78ac9d1d2a6d3ea968d27a1aMediumScore 53/100First seen
MD548aff3b72162a1ec56017d8326982498MediumScore 53/100First seen
SHA25630093c2502fed7b2b74597d06b91f57772f2ae50ac420bcaa627038af33a6982MediumScore 53/100First seen
SHA256527fada7052b955ffa91df3b376cc58d387b39f2f44ebdcb54bc134e112a1c14MediumScore 53/100First seen
SHA256f1ccd604fcdc0034d94e575b3709cd124e13389bbee55c59cbbf7d4f3476e214MediumScore 53/100First seen
SHA256d728cdcf62b497362a1ba9dbaac5e442cebe86145734410212d323a6c2959f0fMediumScore 53/100First seen
MD57f352d63a24b3c281ee49de6c566d99aMediumScore 53/100First seen
MD58369c1c67b2694665b4289766328e0beMediumScore 53/100First seen
MD5b14ca5898a4e4133bbce2ea2315a1916MediumScore 53/100First seen
SHA25645a5dd715dc5f08f3b987a0415c2e500c549508aadf4183fdb94f749af8f1d67MediumScore 53/100First seen
SHA2569f61ed14660d8f85d606605d1c4c23849bd7a05afd02444c3b33e3af591cfdc9MediumScore 53/100First seen
SHA1a63440c39358c94370fe171e7765a4fa4fef67d7MediumScore 53/100First seen
MD5654d80592f17ef6c1980704f9be02864MediumScore 53/100First seen
MD5033248802a758936b51c7e4c6418e3a0MediumScore 53/100First seen
MD570be0ebcdfb46a5317df95404b958462MediumScore 53/100First seen
SHA1269ed1073328556d0be38b2fb5288e9be9e6c629MediumScore 53/100First seen
SHA25679e56dc69ca59b99f7ebf90a863f5351570e3709ead07fe250f31349d43391e6MediumScore 53/100First seen
SHA256a76507b51d84708c02ca2bd5a5775c47096bc740c9f7989afd6f34825edfcba6MediumScore 53/100First seen
SHA1b956f5124f5df6522d00d5014ad9d84d3357546dMediumScore 53/100First seen
SHA256f69fb19604362c5e945d8671ce1f63bb1b819256f51568daff6fed6b5cc2f274MediumScore 53/100First seen
SHA17895a0007c030f37ae5f9185eeb05dde3248e8bdMediumScore 53/100First seen
MD5064168021533f29c21ebf25994bf9b64MediumScore 53/100First seen
MD571921e5fa86a398163e7801af479c819MediumScore 53/100First seen
SHA256ab6a684146cec59ec3a906d9e018b318fb6452586e8ec8b4e37160bcb4adc985MediumScore 53/100First seen
SHA2564057534799993a63f41502ec98181db0898d1d82df0d7902424a1899f8f7f9d2MediumScore 53/100First seen
MD5f6beaeb79dbda516ce3d9b64f6abe83eMediumScore 53/100First seen
SHA12ef13ce1e86fbcfd29079c670a6bb1a9a34daca2MediumScore 53/100First seen

IOC Relationship Graph

Building graph…