Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
4 IOCs
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations
Malware Families
Excerpt
In this article Observed operators and targeting Malware packaging and distribution NeedyMantis architecture and capabilities Mitigation and protection guidance Hunting queries Indicators of compromise Microsoft Threat Intelligence has identified NeedyMantis, a modular post-compromise malware family observed in a limited number of targeted operations affecting telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | corp.tripswithengine.com | High | Score 68/100 | First seen |
| SHA256 | e842dd7642c8e04b5ec20b6393848a9c904e4832930950c16664fe7800ba382e | High | Score 86/100 | First seen |
| SHA256 | c82520eb03c084226be4eafbff46f56dca0aa8804a2a7f23a085a96afe71ef77 | High | Score 61/100 | First seen |
| SHA256 | 9cb68f986043a576e19d32184c583b7d8f571c7219d8dc0065dced1c13f077ef | High | Score 61/100 | First seen |
IOC Relationship Graph
Building graph…