Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Malware Families
Excerpt
Executive Summary Mythic is an open-source collaborative C2 framework which is actively maintained on GitHub. It provides a plugin-based architecture supporting multiple agent types, transport profiles, and an operator-facing web UI. Mythic has a suite of features that help facilitate post-compromise control across many phases of the attack chain. Red team practitioners use it for authorized engagements while it has also been observed in unauthorized intrusions by…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability(4)
Victim
Indicators of Compromise
Open the mindmap →8 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 194.26.192.117 | High | Score 86/100 | First seen |
| IP | 142.93.52.11 | High | Score 86/100 | First seen |
| IP | 170.64.183.242 | High | Score 86/100 | First seen |
| Domain | telemetry-update.services | High | Score 58/100 | First seen |
| IP | 68.178.202.150 | High | Score 86/100 | First seen |
| IP | 192.169.176.54 | High | Score 86/100 | First seen |
| IP | 68.178.205.17 | High | Score 86/100 | First seen |
| IP | 65.87.7.11 | High | Score 86/100 | First seen |
IOC Relationship Graph
Building graph…