Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
20 IOCs

Inside ICMacOS: From an Infostealer to a Persistent RAT

SOCRadar
SOCRadar
Published October 12, 2026Original Report

Threat Actors

Excerpt

Inside ICMacOS: From an Infostealer to a Persistent RAT Over the past few years, Apple’s enterprise footprint has expanded significantly, with macOS capturing an important share of the global desktop operating system market. Modern enterprise adoption has surged, particularly in the United States , where roughly one in three software developers works on macOS. Naturally, this rapid adoption has turned Mac environments into high-value targets for cybercriminals. Threat…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYSandwormINFRASTRUCTURE85.137.253.61mikoblico.xyz45.13.186.247CAPABILITYunknownVICTIMunknown
Adversary(1)
Infrastructure(3)
Capability
Victim

Indicators of Compromise

Open the mindmap →

20 indicators

TypeIndicatorConfidenceScoreFirst Seen
IP85.137.253.61MediumScore 45/100First seen
SHA2563d4f70172c8f31813e7b37fc1a49bce193663e33c4eb65952bb5aec9d7176826HighScore 86/100First seen
SHA2568cc449e7e240894e77187f6faff415bc8b9f2f9da73f60eef1f7605debd9144aHighScore 86/100First seen
Domainmikoblico.xyzHighScore 86/100First seen
SHA256ec37acd3bd15f50eee2941d5644ca0ee738b36ce4a39e9e08058e35ebc7961fcHighScore 86/100First seen
SHA256d9df05a3fb68d302ecf134a1214b609c6ec0a3fb9122907214afac3908b587f4HighScore 86/100First seen
SHA2565dfb0c01ac5c075e23ec37873b30ba16cf28e290e9439d04101f0a8191f929d8HighScore 86/100First seen
SHA2566917505bbdc8efa01ea1a0298eae62a93a57a8c98d3712a69d822dca4a667f05HighScore 86/100First seen
SHA256a9b21ac0112855b835b5e5850ef167471eff7305d42b3a8104c1961b257a444dHighScore 86/100First seen
SHA25662e435102e1e1de74537f174ede7c8ff198dc4df3fd2e1167f537096e0b4dd17HighScore 86/100First seen
SHA2568b7606bdccdd6ff691db875283fdf5b6b658dd8d4d141b44e07f8f2583ff5604HighScore 86/100First seen
SHA256857236d1902f4604acdf27519c0310064d21f8a82af3b95b1e4f02fef581b1d0HighScore 86/100First seen
SHA256c8136413ad38a1028050f5d508e25267b518c5fdeac80b6442103d1009d8924cHighScore 86/100First seen
SHA256fcf9de13ecc70b4fda3998ed7a93849edf86c48767a1a13f32f4a6a631a65ae2HighScore 86/100First seen
IP45.13.186.247MediumScore 50/100First seen
SHA256bc8d70f000e73c0c7a69a2676805190e7109cab59df3e34c5a74d2cb7f13a7e4HighScore 86/100First seen
SHA256e52855d447d152bb698e565f361161cdc8946183ab09bf3cbea89765a2b5ff31HighScore 86/100First seen
SHA256e7e8ac14aaee970c6d00c6cbb398decc56dfc128974c01bfc8e7acd13a18576eHighScore 86/100First seen
SHA256dca852b53c259641e1782bd9122c5007130614a7a8fd17102400acb4f50f6e94HighScore 86/100First seen
SHA2568b4303a065e18e80050ef22031ec60b1a4e84f958d9e56cc5cc34cd29d988d69HighScore 86/100First seen

IOC Relationship Graph

Building graph…