Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
9 IOCs
Operation ShadowRecruit: A Recruitment-Themed Malware Campaign Leveraging ControlR and Google Sheets to Target Indian Job Seekers
Threat Actors
Excerpt
Contents Introduction Key Targets Industries Affected Geographical focus Infection Chain Initial Findings Looking into the Decoy Document Technical Analysis Stage 1 – Initial Infection through LNK file Stage 2 – PowerShell Downloader Analysis Stage 3 – The .NET Dropper – Document.exe Analysis Stage 4 – Decoy Delivery and SheetAgent RAT Analysis Infrastructure & Attribution Conclusion SEQRITE Protection Indicators of Compromise (IOCs) MITRE…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →9 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 434243e615b93a1b948c26ad55902bd78f9fa18e42375c15790634375c1ad3f4 | Medium | Score 53/100 | First seen |
| URL | http://38.242.157.89/file.pdf | High | Score 58/100 | First seen |
| SHA256 | c4859db541b2bd0d266bbc44fafb5a767c862a57a3633a949dfaeebdf88ed529 | Medium | Score 53/100 | First seen |
| SHA256 | fd2ac3a761f66dc6954014532795f9108f65739f23e4b294d4563673b7996881 | Medium | Score 53/100 | First seen |
| SHA256 | ee9dd2a180aea75af5c0eda16b83681c0a5fed451bfad6d5b3af85c3b62fa210 | Medium | Score 53/100 | First seen |
| SHA256 | 70fe7576f20f5dd6a3d872753c922f1394d91487f5eabb417b240b83c22e31b2 | Medium | Score 53/100 | First seen |
| SHA256 | b928e523b51187b932e48a65d36ce3d0c39ee9d409d493b90f98cf3d1e0e73b0 | Medium | Score 53/100 | First seen |
| SHA256 | cf3f1bceb83fa3acefbabae4bdc275347cfe03dd7fc770052a33baef204a89f7 | Medium | Score 53/100 | First seen |
| SHA256 | 2b33b5185e93e1655eb27dbaa025d7ee088627db3d640fe4709be705646b189c | High | Score 56/100 | First seen |
IOC Relationship Graph
Building graph…