Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
4 IOCs
MetaStealer Part 2, Google Cookie Refresher Madness and Stealer Drama
Malware Families
Excerpt
Stealer’s World of Drama Previously, I wrote a blog going through some of MetaStealer’s functionalities and did a brief comparison with Redline since they are both very similar but, at the same time, different. You might say that all stealers are the same because they have one purpose - to steal. However, each of them is somewhat different from the others, even if they borrowed the code from their predecessors. Every stealer tries to be better than the other one despite…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability(7)
Victim
Indicators of Compromise
Open the mindmap →4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 5.42.65.34 | High | Score 58/100 | First seen |
| MD5 | b3cca536bf466f360b7d38bb3c9fc9bc | Medium | Score 53/100 | First seen |
| MD5 | e6db93b513085fe253753cff76054a2a | Medium | Score 53/100 | First seen |
| MD5 | a8d6e729b4911e1a0e3e9053eab2392b | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…