Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Excerpt
PowerShell Script — Tactical RMM Installation Executive Summary A PowerShell script has been identified with characteristics consistent with malicious remote access tool (RAT) deployment. The script, found at a suspicious URL with zero antivirus detection, installs Tactical RMM software configured to connect to an unauthorized command and control server. sha256:7803e77ef9fa54ad393fb2732f878e449529be18809ab5311bd5e3ff2bb1299c Threat Intelligence Source Attribution Distribution…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 7803e77ef9fa54ad393fb2732f878e449529be18809ab5311bd5e3ff2bb1299c | Medium | Score 53/100 | First seen |
| SHA256 | a0809da5b2c576299df8adf86287e67469e3ab4098ecb4815e93f532f73055cf | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…