Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
5 IOCs
Kazuar: Anatomy of a nation-state botnet
Threat Actors
Malware Families
Excerpt
In this article Delivery Module types Botnet operations Who is Secret Blizzard? Mitigation and protection guidance Microsoft Defender detections Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard , has been under constant development for years and continues to evolve in support of espionage-focused operations. Over time, Kazuar has expanded from a relatively traditional backdoor into a highly modular peer-to-peer (P2P) botnet…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →5 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | c1f278f88275e07cc03bd390fe1cbeedd55933110c6fd16de4187f4c4aaf42b9 | Medium | Score 53/100 | First seen |
| SHA256 | 6eb31006ca318a21eb619d008226f08e287f753aec9042269203290462eaa00d | Medium | Score 53/100 | First seen |
| SHA256 | 69908f05b436bd97baae56296bf9b9e734486516f9bb9938c2b8752e152315d4 | Medium | Score 53/100 | First seen |
| MD5 | 82760b84f1d703d596c79b88ba4fac1e | Medium | Score 53/100 | First seen |
| SHA256 | 436cfce71290c2fc2f2c362541db68ced6847c66a73b55487e5e5c73b0636c85 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…