Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Malware Families
Excerpt
m/Intrins om/com https://t https://fr. witter.co linkedin.c ec pany/intr insec https://w https://w ww.intrin ww.intrin sec.com/ sec.com/ blog/ blog/ “Chaos is a ladder”: Vidar’s recent rise to the top TLP:CLEAR PAP:CLEAR Table of contents 1. Key findings.................................................................................................................................................................................. 3 2. Introduction…
Read the original report →Diamond Model
Adversary(4)
Infrastructure(6)
Capability(4)
Victim
Indicators of Compromise
Open the mindmap →30 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://aviab1.github.io/blog/vidar-stealer/ | High | Score 67/100 | First seen |
| Domain | wto.azl.one | High | Score 67/100 | First seen |
| Domain | chi.botick.top | High | Score 67/100 | First seen |
| URL | sec.com/ | High | Score 67/100 | First seen |
| URL | https://t.me/KATANACLOUD_RESERVE/28 | High | Score 67/100 | First seen |
| MD5 | a72f693b77cbaeafea19dc3ac83a5b07 | High | Score 67/100 | First seen |
| Domain | pre.automanpk.com | High | Score 67/100 | First seen |
| SHA1 | a8dd417fdac8c47b8c4b0630c3dca337ce4f873c | High | Score 67/100 | First seen |
| Domain | witter.co | High | Score 67/100 | First seen |
| Domain | grow.com | High | Score 67/100 | First seen |
| URL | 159.69.103.251/relations | High | Score 67/100 | First seen |
| URL | 65.109.242.143/relations | High | Score 67/100 | First seen |
| IP | 65.21.58.227 | High | Score 67/100 | First seen |
| IP | 78.47.238.183 | High | Score 67/100 | First seen |
| Domain | builder.zip | High | Score 67/100 | First seen |
| Domain | githab.com | High | Score 67/100 | First seen |
| URL | https://t.me/c/2380538610/267 | High | Score 67/100 | First seen |
| URL | https://t.me/KATANACLOUD_NEWS/20 | High | Score 67/100 | First seen |
| URL | https://telegram.me/sre22qe | High | Score 70/100 | First seen |
| URL | https://www.dllme.com/dll/files/msedge_elf | High | Score 67/100 | First seen |
| URL | https://www.ontinue.com/resource/blog-vidar-stealer-malware-analysis/ | High | Score 67/100 | First seen |
| URL | https://steamcommunity.com/profiles/76561198777118079 | High | Score 70/100 | First seen |
| URL | https://www.intrinsec.com/en/cyber-threat-intelligence- | High | Score 67/100 | First seen |
| URL | v.top/uFJrXt/builder?hash=443_d29f5f7c045713f2ddc1bb1b43faa920&download=1 | High | Score 67/100 | First seen |
| URL | 213.159.75.95/relations | High | Score 67/100 | First seen |
| URL | https://www.intrinsec.com/analysis-of-acreed-a-rising-infostealer/ | High | Score 67/100 | First seen |
| MD5 | d29f5f7c045713f2ddc1bb1b43faa920 | High | Score 67/100 | First seen |
| IP | 91.142.72.234 | High | Score 67/100 | First seen |
| URL | https://t.me/g2trbox | High | Score 67/100 | First seen |
| URL | https://steamcommunity.com/profiles/76561198754004827 | High | Score 68/100 | First seen |
IOC Relationship Graph
Building graph…