Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
15 IOCs
Operation QUICSILVER: China-Nexus Actor Targets Myanmar Diplomats via VHD-Delivered Go Backdoor
Malware Families
Excerpt
Contents Introduction Key Targets Industries Affected Geographical focus Infection Chain Campaign Timeline Initial Findings Looking into the Decoy Document Technical Analysis Stage 1 – LNK-Based Initial Access Stage 2 – Split Payload Reconstruction via ftp Script Stage 3 – QUICAgent Implant – Go-Based Backdoor Infrastructure & Attribution Conclusion SEQRITE Protection Indicators of Compromise (IOCs) MITRE ATT&CK Mapping Introduction Seqrite APT…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →15 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 26f735cbbb1257be94e6d01656a35bf66a8ae9c34868548d69ec5cb588f9f916 | Medium | Score 53/100 | First seen |
| IP | 104.64.211.22 | High | Score 58/100 | First seen |
| SHA256 | c4b4647795567ab15528edd1ab1bf37fb50e21b442e59a653051061973e87c02 | Medium | Score 53/100 | First seen |
| SHA256 | 4a1a1b1455c3ea91a3d9203ebff025553227302cede6077e821d303655e2c9f2 | Medium | Score 53/100 | First seen |
| Domain | mediumser.com | High | Score 58/100 | First seen |
| SHA256 | 0803521a7e9081f46f8f9f61d72371ecc1f49657f10202fffa9a33f581d8bb39 | Medium | Score 53/100 | First seen |
| IP | 38.60.244.141 | High | Score 58/100 | First seen |
| SHA256 | daeac66441b88ba22806f6617058a2dbf1ea0ddcc6c94f291542ea853ac6f9d3 | Medium | Score 53/100 | First seen |
| Domain | register.mediumser.com | High | Score 58/100 | First seen |
| SHA256 | aeff39943e254c34187e4a60be3d09d49687439e709eeb4be2b1984310d8ba5c | Medium | Score 53/100 | First seen |
| URL | https://regupdate.eamakfu49dc28wa.workers.dev/vere0zme82cadre | High | Score 58/100 | First seen |
| Domain | maui-cocktailbar.com | High | Score 58/100 | First seen |
| URL | https://appupdate.0cmds20cj2cdf8.workers.dev/A3cmf0q9ASCion | High | Score 58/100 | First seen |
| SHA256 | 575305cdaeb1d2187ca6d5ebe32f4c3e3fb53f5ccbe1c0cc257a7f71d84e6f35 | Medium | Score 53/100 | First seen |
| SHA256 | cd147efe37003399e174951927e5fe727a4481756b116f0204a14a64cc62b059 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…