Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
30 IOCs
Slaiclind: analyzing a campaign combining ClickFix and EtherHiding
Threat Actors
Malware Families
Excerpt
Analysis of the Slaiclind Malicious Campaign Mastodon About Stormshield The European cybersecurity choice Our staff Our ecosystem Our history Our sales offices Our CSR approach Join us Contact En Fr Menu Our difference Our solutions & products By industry Aviation Public Administration and Government Critical communication Defense and Military Organizations Water Industry Facility Management & Warehouse Electric utilities Navy Health and Healthcare Facilities Land…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →30 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | allowcsxan2.site | High | Score 84/100 | First seen |
| Domain | chekcms432.cc | High | Score 86/100 | First seen |
| MD5 | 41e66c27fc6202f332e8e0a33aa5f519 | Medium | Score 53/100 | First seen |
| SHA256 | 9f7bc41816a0eca3cae34168985d5ad9181a3cf41624cd2bf5c2cc7be2d031f0 | High | Score 85/100 | First seen |
| MD5 | 4a34c2794640480ae7e4b8fc97b92111 | Medium | Score 53/100 | First seen |
| Domain | checkms5.cc | High | Score 86/100 | First seen |
| Domain | api-relay.cc | High | Score 86/100 | First seen |
| Domain | imersion4cf.site | High | Score 86/100 | First seen |
| Domain | cf-check.site | High | Score 86/100 | First seen |
| Domain | checkmrobot.site | High | Score 86/100 | First seen |
| Domain | checkrobotbb.pw | High | Score 86/100 | First seen |
| Domain | checkbot-cf.site | High | Score 86/100 | First seen |
| URL | https://checkmybtrobot.cc/j/traffic?r=797a | High | Score 58/100 | First seen |
| URL | https://checkmybtrobot.cc/ps/traffic?r=797a|iex | High | Score 58/100 | First seen |
| Domain | windowsdiag-service.pw | High | Score 86/100 | First seen |
| MD5 | 984b43058cf544f02979f32814f5599a | Medium | Score 53/100 | First seen |
| Domain | checkdvvc99.cc | High | Score 86/100 | First seen |
| URL | https://checkmybtrobot.cc/p?t=4a34c2794640480ae7e4b8fc97b92111_430c98a587987b32ff741571a6c411f058ca09c8 | High | Score 58/100 | First seen |
| MD5 | b97643bd45522efe9eea175d897787d3 | High | Score 85/100 | First seen |
| Domain | botcheck-cf.top | High | Score 86/100 | First seen |
| SHA1 | afe29c694aee56e173b7bc929de05763f1af2b57 | Medium | Score 53/100 | First seen |
| SHA1 | 430c98a587987b32ff741571a6c411f058ca09c8 | Medium | Score 53/100 | First seen |
| IP | 78.40.198.82 | High | Score 58/100 | First seen |
| Domain | checkcloudflere.site | High | Score 86/100 | First seen |
| URL | https://checkmybtrobot.cc/p?t=984b43058cf544f02979f32814f5599a_afe29c694aee56e173b7bc929de05763f1af2b57 | High | Score 58/100 | First seen |
| IP | 195.63.139.180 | High | Score 80/100 | First seen |
| Domain | allowcheckd3.cc | High | Score 86/100 | First seen |
| Domain | univesalcheckrobot.site | High | Score 86/100 | First seen |
| Domain | checkvbbrows39.cc | High | Score 86/100 | First seen |
| Domain | flarecloudcheck.site | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…