Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
50 IOCs
OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia
Malware Families
Excerpt
Introduction We have been tracking two new backdoors, OctLurk and SilkLurk , observed in attacks against government organizations primarily in Central Asia since January 2025. Identified victims are located in Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic. These organizations operate across several sectors, including healthcare, research, government offices, ministries of foreign affairs, logistics, law‑enforcement agencies, urban…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability(4)
Victim
Indicators of Compromise
Open the mindmap →50 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 95.179.210.138 | High | Score 58/100 | First seen |
| Domain | fm01.clouddevicemetrics.com | High | Score 58/100 | First seen |
| Domain | confbase.mdpsupport.net | High | Score 58/100 | First seen |
| IP | 212.11.39.138 | High | Score 58/100 | First seen |
| MD5 | a4d550a3ba0cd073fe3839b99d98a7a8 | Medium | Score 53/100 | First seen |
| IP | 195.86.120.2 | High | Score 58/100 | First seen |
| Domain | wedfcvbn.gleeze.com | High | Score 58/100 | First seen |
| MD5 | 37dc84e4bcad92fa28f1e7778d088283 | Medium | Score 53/100 | First seen |
| IP | 45.32.152.50 | High | Score 58/100 | First seen |
| MD5 | f4578e869a735cfad691f927bae3e638 | Medium | Score 53/100 | First seen |
| IP | 45.138.157.165 | High | Score 58/100 | First seen |
| MD5 | 1415a78b75de7db4ba3d1e61d7db4501 | Medium | Score 53/100 | First seen |
| MD5 | 9a1dd1d96481d61934dcc2d568971d06 | Medium | Score 53/100 | First seen |
| MD5 | 082d49ef9f14e6811d68c7e0e82e5069 | Medium | Score 53/100 | First seen |
| MD5 | 32a5985543433a4f60da2fafd873b927 | Medium | Score 53/100 | First seen |
| MD5 | 4e6d5c4770d5a822d7fcce6a74f7ad73 | Medium | Score 53/100 | First seen |
| Domain | rgnojb.casacam.net | High | Score 58/100 | First seen |
| Domain | tj.tajikistandip.com | High | Score 58/100 | First seen |
| IP | 95.179.141.26 | High | Score 58/100 | First seen |
| IP | 154.196.162.76 | High | Score 58/100 | First seen |
| Domain | dns.ssentialserv.xyz | High | Score 58/100 | First seen |
| MD5 | 6ecf84fb18f6747ed08d7598364d853a | Medium | Score 53/100 | First seen |
| Domain | gycudore.kozow.com | High | Score 58/100 | First seen |
| IP | 45.77.136.228 | High | Score 58/100 | First seen |
| MD5 | 8269d6ba1b6842f9152c90cf7add9b93 | Medium | Score 53/100 | First seen |
| Domain | tyhbgtyuj.gleeze.com | High | Score 58/100 | First seen |
| MD5 | 7c2f64461bb519c6cbf1fc687675514c | Medium | Score 53/100 | First seen |
| MD5 | 62944e26b36b1dcace429ae26ba66164 | Medium | Score 53/100 | First seen |
| IP | 45.61.149.112 | High | Score 58/100 | First seen |
| MD5 | 3c9a1ba8e0c7475706adc6376e9d7b7c | Medium | Score 53/100 | First seen |
| MD5 | 45cf5916fab4272a1313c26e67aa9220 | Medium | Score 53/100 | First seen |
| IP | 64.7.198.130 | High | Score 58/100 | First seen |
| MD5 | 2a571f6cee42a17d873f4c942649813f | Medium | Score 53/100 | First seen |
| MD5 | a0cc7accc79abb0287aaba825d0351f0 | Medium | Score 53/100 | First seen |
| MD5 | a56cce62930a6bee80d679b4c495a340 | Medium | Score 53/100 | First seen |
| Domain | uyhvfredc.accesscam.org | High | Score 58/100 | First seen |
| MD5 | 5e26df131ff0a679a0a2699b723b46e3 | Medium | Score 53/100 | First seen |
| Domain | ctyuhjerf.kozow.com | High | Score 58/100 | First seen |
| MD5 | b874123a80fc4f40e06872b9cb54ebc6 | Medium | Score 53/100 | First seen |
| Domain | api2.annoyingremote.com | High | Score 58/100 | First seen |
| MD5 | 18dc8bff47cc282508354771d0c8cf8c | Medium | Score 53/100 | First seen |
| Domain | digital.leroymerling.com | High | Score 58/100 | First seen |
| MD5 | 2f18472866f38c1e1c2c5c14b9a6ab56 | Medium | Score 53/100 | First seen |
| IP | 154.196.187.73 | High | Score 58/100 | First seen |
| Domain | dns.multitoconference.com | High | Score 58/100 | First seen |
| MD5 | be4731c09734da2e8eb6814a9c82f266 | Medium | Score 53/100 | First seen |
| Domain | about.blsouqs.com | High | Score 62/100 | First seen |
| Domain | ssl.blsouqs.com | High | Score 66/100 | First seen |
| MD5 | ef59aad625eebda8650aec5820d6ce69 | Medium | Score 53/100 | First seen |
| MD5 | cf903e4a1629aa0582fd0363b5786676 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…