Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Excerpt
By: Jason Reaves A lot of focus specifically surrounding DPRK has been on IT workers but there are multiple entities performing various schemes. One of the more prolific ones being interviewing developers and having them work on TA supplied code repositories from various sites. The malware delivered is normally leveraged for harvesting credentials and crypto; InvisibleFerret[5], BeaverTail, OtterCookie and Golang based malware[4]. Alot of work goes into tracking and…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →16 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | http://144.172.116.22:8086/upload | High | Score 58/100 | First seen |
| IP | 107.189.22.20 | High | Score 58/100 | First seen |
| IP | 144.172.110.132 | High | Score 58/100 | First seen |
| SHA256 | 3a08e7f236aac7f6eb6f75911b98bc5157dcfa53b268b447f7d1b87b0615b90d | Medium | Score 51/100 | First seen |
| IP | 144.172.93.253 | High | Score 58/100 | First seen |
| IP | 144.172.110.228 | High | Score 58/100 | First seen |
| IP | 144.172.99.248 | High | Score 58/100 | First seen |
| IP | 144.172.99.81 | High | Score 58/100 | First seen |
| IP | 144.172.110.96 | High | Score 58/100 | First seen |
| SHA256 | 31d55cb5dd194cd99387d386e84d8b24d340c0b52983ce630f0aafd70fee008c | Medium | Score 40/100 | First seen |
| SHA256 | 76df69b919642ab4d54a94e8988b4fafaa16c933f7bc5d6dffddf4c27762908a | Medium | Score 51/100 | First seen |
| IP | 144.172.116.22 | High | Score 58/100 | First seen |
| URL | http://144.172.116.22:8085/upload | High | Score 58/100 | First seen |
| URL | http://144.172.116.22:8087 | High | Score 58/100 | First seen |
| SHA256 | 843ac01149cced785dfebd0028d3b03ba78e286e1c6f9517ebfcdb609d97af4c | Medium | Score 53/100 | First seen |
| IP | 144.172.93.169 | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…