Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
18 IOCs
REVSTEALER ramps up: analysis of up-and-coming infostealer
Threat Actors
Malware Families
Excerpt
Elastic Security Labs is tracking an emerging infostealer, REVSTEALER, under REF2859. This family has gained momentum in recent months, with higher distribution volume, and has emerged as a formidable threat, featuring a comprehensive credential harvester, an embedded sandbox scoring system, and a Polygon blockchain-based dead drop for resilience. Beyond credential theft, REVSTEALER targets gaming platforms for additional monetization; the developer clearly understands that…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →18 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | config.hubdisplay.lol | High | Score 86/100 | First seen |
| Domain | health.journal-metric.lol | High | Score 58/100 | First seen |
| SHA256 | 7c08cf409194056a8517865e5d3433d1499bb8262263b55b49b8b07d9d182fcb | High | Score 85/100 | First seen |
| SHA256 | c66d2b77b9e85c53391891212413ad9a99eb66f4b11c6a431e78884a5b2651e5 | High | Score 85/100 | First seen |
| Domain | monitor5.roast-core85.click | High | Score 86/100 | First seen |
| SHA256 | 5c30efd5b9ff75023c3813705f5c47feccc496f439b24b3e572db4c3b08dffe3 | Medium | Score 53/100 | First seen |
| SHA256 | 1617552169df805405b1bb70f742d6eac5af342f31c6e39ff6b9613bd2392354 | Medium | Score 53/100 | First seen |
| SHA256 | 8b33e0f32c42a317e3d9cd67d5a6dc68e91a6cf9dd44742162858e7d83cf2073 | Medium | Score 53/100 | First seen |
| SHA256 | bd97d5cab2d09b001d1b9e08890bce1a2b2cf8542a4b31c86b2def59328cafb2 | Medium | Score 53/100 | First seen |
| Domain | resight-cheats.net | High | Score 58/100 | First seen |
| SHA256 | f07666ac22dfa1a361b8a8576baf69eadaf15431db9f3c34e93334d8d2f8d691 | Medium | Score 53/100 | First seen |
| SHA256 | adc4aa652965396b52e79435ca54987ae9eb21bf5e67de5e9461b09655165ee4 | Medium | Score 53/100 | First seen |
| SHA256 | 83f5b4ca629681abab2b9680472a304572a8c91b4a8ccc1189fbf58c6186db09 | Medium | Score 53/100 | First seen |
| SHA256 | 4c897108e8e793d6904110928c996815c302d6975c9bc61162149e855a963d50 | High | Score 85/100 | First seen |
| SHA256 | 13d7237d7289e67c2d806a65d52580b453ce4987acbe2c4c4d04833f55ebccfa | High | Score 85/100 | First seen |
| Domain | elitecheatsx.live | High | Score 58/100 | First seen |
| SHA256 | 14b2ac356ed75d10ef40bbaaa48e7dd9fff7de9719c2a43ad123fe843dd4e4e2 | High | Score 85/100 | First seen |
| Domain | metric.gardenpark.click | High | Score 86/100 | First seen |
IOC Relationship Graph
Building graph…