Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
11 IOCs
Q3 2026 Statistical Report on Malware Targeting Windows Web Servers
Threat Actors
Malware Families
Excerpt
Q3 2026 Statistical Report on Malware Targeting Windows Web Servers - ASEC Threat Resources Malware Dark Web Vulnerabilities Phishing/Scam CERT Smishing EndPoint Mobile Networks APT Trend Daily Threats Security Advisory RSS Feedly Language 한국어 English 日本語 한국어 English 日本語 RSS Feedly Trend Q3 2026 Statistical Report on Malware Targeting Windows Web Servers Oct 08 2026 Content The AhnLab SEcurity intelligence Center (ASEC) analyzed the attack status of Windows web servers in the…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(5)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →11 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 0a4be0b6c650ffdcd1c22db56f1c4aec | Medium | Score 53/100 | First seen |
| URL | http://2.59.133.147:31338/ins.txt | High | Score 58/100 | First seen |
| URL | http://2.59.133.147:31338/sm.json | High | Score 58/100 | First seen |
| URL | http://45.138.16.187:31337/cofuz.json | High | Score 58/100 | First seen |
| URL | http://45.138.16.187:31337/bb.json | High | Score 58/100 | First seen |
| MD5 | 177e34d9174766a1d187a0c82de4c02f | Medium | Score 53/100 | First seen |
| MD5 | 1dbfda02d74b6a7586c4430175204c28 | Medium | Score 53/100 | First seen |
| MD5 | 10f705728d228ad949b7894c1a85a2b1 | Medium | Score 53/100 | First seen |
| URL | http://206.82.6.22/ | High | Score 58/100 | First seen |
| CVE | CVE-2019-18935 | High | Score 61/100 | First seen |
| MD5 | 18fb4e070653fc9791e0e408d8cb1c8e | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…