Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
More_Eggs? A Venom Spider Backdoor Targeting HR
Threat Actors
Excerpt
The More_Eggs malware, operated by the financially motivated Venom Spider (aka Golden Chickens) group, is a potent JavaScript backdoor sold as Malware-as-a-Service (MaaS) to threat actors like FIN6 and Cobalt Group. Known for targeting human resources (HR) departments, it exploits the trust in job application emails to deliver malicious payloads. This blog analyzes a recent More_Eggs sample, Sebastian Hall.zip , which contains a decoy image and a malicious Windows shortcut (…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | a525e5d42676db2bf96741789c99f5cf081da81f33522622d57af9619a828e2f | Medium | Score 53/100 | First seen |
| SHA256 | 4e18f606f7a31ffbea632ceaffad77689f810a3cde26d2a913d4530eaae5c5d1 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…