Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
21 IOCs
Mirage Kitten targets Middle East and Africa region with new malware
Threat Actors
Malware Families
Excerpt
Introduction Mirage Kitten – also known as UNC1549, Smoke Sandstorm, and Nimbus Manticore – is an advanced persistent threat (APT) group focused on cyber-espionage operations against aerospace, aviation, defense, and telecommunications sectors across the Middle East and Africa, using highly targeted spear-phishing campaigns, fake recruitment portals, and custom multi-stage malware to gain persistent access and exfiltrate sensitive data. During recent threat research, we…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →21 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | a239e655709a2518dd0b7bdbed163679 | Medium | Score 53/100 | First seen |
| MD5 | c832ecd135781b11f59e3fffb3d2b6ac | Medium | Score 53/100 | First seen |
| MD5 | afb1c1583606599c7272cfb33cc6f498 | Medium | Score 53/100 | First seen |
| MD5 | f7d36cc5904a53252d2bb3d21615134f | Medium | Score 53/100 | First seen |
| Domain | global-reds.com | High | Score 69/100 | First seen |
| MD5 | 5fa15ef96808ea82f0a6176f0bb4b386 | Medium | Score 53/100 | First seen |
| Domain | maadinglobal.com | High | Score 69/100 | First seen |
| Domain | neexportfolio.com | High | Score 69/100 | First seen |
| MD5 | ae628efa305387b633dce82f9364875b | Medium | Score 53/100 | First seen |
| MD5 | 42f847597109da2a220391bb09d00676 | Medium | Score 53/100 | First seen |
| MD5 | d09b14a2fe01c7363ecc56f5d046162c | Medium | Score 53/100 | First seen |
| IP | 172.86.98.113 | Low | Score 31/100 | First seen |
| Domain | buisness-centeral-transportation.com | High | Score 68/100 | First seen |
| Domain | realhealthshop.com | High | Score 69/100 | First seen |
| MD5 | c90f0efadbf322e5eb1c4103a38c30e6 | Medium | Score 53/100 | First seen |
| Domain | aecert.org | High | Score 69/100 | First seen |
| Domain | tjconsultingservices.com | High | Score 69/100 | First seen |
| MD5 | 6038d42af0affd1fb263f470c0956f6b | Medium | Score 53/100 | First seen |
| Domain | thehealth-life.com | High | Score 69/100 | First seen |
| Domain | healthcarezoomcenteral.org | High | Score 69/100 | First seen |
| Domain | business-deegital.com | High | Score 69/100 | First seen |
IOC Relationship Graph
Building graph…