Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
28 IOCs
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
Threat Actors
Malware Families
Excerpt
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC‑0099-Sandworm collaboration Cybersecurity research and insight for the AI era · Moving soon to the ESET Blog English Español Deutsch Português Français TIPS & ADVICE BUSINESS SECURITY ESET RESEARCH About ESET Research Blogposts Podcasts White papers Threat reports WeLiveScience FEATURED Ukraine crisis – Digital security resource center WeLiveProgress COVID-19 Resources Videos TOPICS Digital Security Scams…
Read the original report →Diamond Model
Adversary(3)
Infrastructure(6)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →28 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA1 | 028ca11f3f0d8396043af7bf756231fc2f50f829 | Medium | Score 53/100 | First seen |
| IP | 109.176.250.101 | High | Score 58/100 | First seen |
| IP | 193.93.119.42 | High | Score 58/100 | First seen |
| SHA256 | f91b909f43829f8b20732b3bcf80cbc4bb078dd47b41638379a078e35984c9a4 | Medium | Score 53/100 | First seen |
| IP | 23.137.249.65 | High | Score 58/100 | First seen |
| SHA256 | ecbbcb3298e7d3b4196103333c3e839cfe47a6ca47602b94a6d596683f6bb358 | Medium | Score 53/100 | First seen |
| SHA1 | e29af83a07fb32eb47c28733a9382e766d53f704 | Medium | Score 53/100 | First seen |
| SHA256 | 000000000143db657d1d6f80b5066dd109a4cb31f7dc6cb5d56050fffb014217 | Medium | Score 53/100 | First seen |
| SHA256 | 0000006149970f245e6cec43664bce203f2514b60a153e194f31e2b229a1339d | Medium | Score 53/100 | First seen |
| SHA1 | 09c816697c0c2aff9b4ff58681558ca30d04c9cd | Medium | Score 53/100 | First seen |
| SHA1 | 4e3e6577866e4ce2ed73ca089700ae04230e768f | Medium | Score 53/100 | First seen |
| SHA1 | 8ceb5f8bcdf4995b7164996f1629d682613bb17b | Medium | Score 53/100 | First seen |
| SHA1 | 01855153ca7a33ad5ff36451de5612dfba0dd2ca | Medium | Score 53/100 | First seen |
| SHA1 | b69ef0e45b401440c0fde22046775d0c57e87415 | Medium | Score 53/100 | First seen |
| IP | 95.217.35.92 | High | Score 58/100 | First seen |
| SHA1 | d7e6a5a46c6ed3510997e91b11e51be0250fd2a2 | Medium | Score 53/100 | First seen |
| IP | 51.255.223.60 | High | Score 58/100 | First seen |
| SHA1 | d5f9288daebf87ae4579945f8dc6cf235b093cfd | Medium | Score 53/100 | First seen |
| IP | 62.210.85.80 | High | Score 58/100 | First seen |
| SHA1 | 69969eeb7e0a3d84c4e70193636fcf934c6aa388 | Medium | Score 53/100 | First seen |
| IP | 78.27.153.163 | High | Score 58/100 | First seen |
| IP | 65.21.57.122 | High | Score 58/100 | First seen |
| SHA1 | 9085896989947c0919a660352f75f6b233fc645b | Medium | Score 53/100 | First seen |
| SHA1 | 131a371a1e4ee78ec3b2863607c99290ec3b58a6 | Medium | Score 53/100 | First seen |
| IP | 37.205.14.171 | High | Score 58/100 | First seen |
| SHA256 | 5636b3af4738c3998284c4805d91209cab38921159c66a6f359f3f692af1c908 | Medium | Score 53/100 | First seen |
| SHA256 | 0000000998b5ff8c0f1115ce9212f772d0427151f50fe858e6de1d22600f1680 | Medium | Score 53/100 | First seen |
| URL | http://51.15.204.214/ | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…