Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Malware Families
Excerpt
Breaking Down SmokeLoader Sample Figure 1: SmokeLoader Sample from MalwareBazaar Initially, I conducted static analysis by examining strings and using PEStudio to understand the malware’s behavior, imports, libraries, and other characteristics. It is important to gather as much information as possible before starting the reverse engineering process. The more information and understanding you have about the binary, the easier it will be to reverse engineer it. You can identify…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 46404801da9e3f92ceafdde930ca25ff | Medium | Score 53/100 | First seen |
| MD5 | ec67029dba040a8a3f98bda4601089a6 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…