Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
8 IOCs
Latrodectus [IceNova] – Technical Analysis of the… New IcedID… Its Continuation… Or its Replacement?
Threat Actors
Malware Families
Excerpt
My first public malware research was for a strain of IcedID . A few months later, in my nighttime activities, I was working on technical analysis research for Sodinokibi ( REvil ), a Ransomware that is no longer seen, however, is part of the evolutionary history of the business model that we now know as RaaS . But, I saw that a friend had posted an IcedID sample that didn’t match the Yara detection that I had created in my first research. Innocently, I decided to just…
Read the original report →Diamond Model
Adversary(3)
Infrastructure(3)
Capability(6)
Victim
Attack Flow9 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →8 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 277c879bba623c8829090015437e002b | Medium | Score 55/100 | First seen |
| SHA256 | 65da6d9f781ff5fc2865b8850cfa64993b36f00151387fdce25859781c1eb711 | Medium | Score 55/100 | First seen |
| Domain | wireoneinternet.info | High | Score 61/100 | First seen |
| MD5 | 4508703ec934ed04519afe04f93ff532 | Medium | Score 55/100 | First seen |
| URL | https://skinnyjeanso.com/live/ | High | Score 86/100 | First seen |
| SHA256 | fad25892e5179a346cdbdbba1e40f53bd6366806d32b57fa4d7946ebe9ae8621 | Medium | Score 55/100 | First seen |
| URL | https://titnovacrion.top/live/ | High | Score 86/100 | First seen |
| SHA256 | b9dbe9649c761b0eee38419ac39dcd7e90486ee34cd0eb56adde6b2f645f2960 | Medium | Score 55/100 | First seen |
IOC Relationship Graph
Building graph…