Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
10 IOCs
Operation Silent Rotor: Targeted Campaign Compromises Unmanned Aviation Sector Ahead of Moscow Summit
Excerpt
Table of Content Introduction Key Targets Industries Affected Geographical focus Infection Chain Initial Findings Looking into the Decoy Documents Technical Analysis Stage 1 – Analysis of Malicious Executable Stage 2 – Second stage payload dropper Infrastructure & Attribution Conclusion Seqrite Protection Indicators of Compromise (IOCs) MITRE ATT&CK Mappinga Authors Introduction SEQRITE Labs has been actively tracking emerging threats and recently…
Read the original report →Diamond Model
Adversary
Infrastructure(4)
Capability
Victim
Attack Flow8 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →10 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 45.142.36.76 | High | Score 58/100 | First seen |
| SHA256 | 57e26f6e3b311a1064c946b69159ee05abedf9228b2f95c65536429e7ac7fb24 | Medium | Score 53/100 | First seen |
| URL | http://kleymarket.ru | High | Score 58/100 | First seen |
| SHA256 | a7bd8869293212e1671df90d2d41b96d4933eb9408b1111bd830e111a91bb202 | Medium | Score 53/100 | First seen |
| IP | 92.62.113.232 | High | Score 58/100 | First seen |
| SHA256 | 5936f42ffd7fa7896eeae725b60a5d26bbf3e584712671ef5da0138ee5d58f60 | Medium | Score 53/100 | First seen |
| SHA256 | 89f8e42c825d09a0a50e99bbf7304d7037be33ea362a57d34f87fa7981f80126 | Medium | Score 53/100 | First seen |
| SHA256 | fdef9e489f773319f55f92f712d1b7b5447d59a632b8f4173d1b161d3759ad92 | Medium | Score 53/100 | First seen |
| IP | 89.108.110.154 | High | Score 58/100 | First seen |
| SHA256 | 2064ef387ac9e51ba72b32004d99e8a0b291dbab24ed8db30f437abf1b40cb49 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…