Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
6 IOCs
Needymantis: Unpacking a Post Compromise Malware Family Used in Targeted Operations
Malware Families
Excerpt
https://www.microsoft.com/en-us/security/blog/2026/09/28/needymantis-unpacking-a-post-compromise-malware-family-used-in-targeted-operations/ NeedyMantis: Unpacking a post-compromise malware family used in targeted operations By Microsoft Threat Intelligence Published: 2026-09-28 · Archived: 2026-10-13 02:00:42 UTC Microsoft Threat Intelligence has identified NeedyMantis, a modular post-compromise malware family observed in a limited number of targeted operations affecting…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | corp.tripswithengine.com | High | Score 68/100 | First seen |
| URL | https://winsparkle.org/ | High | Score 67/100 | First seen |
| URL | https://poedit.com/ | High | Score 67/100 | First seen |
| SHA256 | e842dd7642c8e04b5ec20b6393848a9c904e4832930950c16664fe7800ba382e | High | Score 86/100 | First seen |
| SHA256 | c82520eb03c084226be4eafbff46f56dca0aa8804a2a7f23a085a96afe71ef77 | High | Score 61/100 | First seen |
| SHA256 | 9cb68f986043a576e19d32184c583b7d8f571c7219d8dc0065dced1c13f077ef | High | Score 61/100 | First seen |
IOC Relationship Graph
Building graph…