Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
4 IOCs
Obfuscation Without Effort: Breaking a UAC-0226 GIFTEDCROOK Stealer
Threat Actors
Malware Families
Excerpt
by Robin Dost EDIT: I have YARA rules available for this one, if you need them, contact me at contact@robin-dost.de Also, checkout my project KRAKEN if you’re interested in continuous threat actor tracking. Lately I’ve been spending more time looking at malware targeting Ukraine and Europe. And yeah, a lot of it is neither new nor particularly creative. But it works. And that’s exactly why it’s worth digging into. The sample we’re looking at here is fresh (from today,…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(1)
Victim
Attack Flow9 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 2a8ea9f1ad8936fb302243faa64b91c5767df411923715cbdb1a869e3bfd7e6d | Medium | Score 56/100 | First seen |
| CVE | CVE-2025-8088 | High | Score 72/100 | First seen |
| SHA256 | 7200a9f1e1ea51b66ab9c9274e9d8f805633179634e8ff4dcb8ef82bc02518df | Medium | Score 56/100 | First seen |
| CVE | CVE-2025-6218 | High | Score 64/100 | First seen |
IOC Relationship Graph
Building graph…