Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Malware Families
Excerpt
Got nothing witty or smart to open with so, this weekend we hunt for Sliver C2! Sliver is an open-source cross-platform adversary emulation/red team framework, essentially a Command & Control (C2) framework written in Go. It was developed by Bishop Fox and released publicly in 2019 and immediately adopted by malicious actors. Malware Samples IoC Before we start our hunt, it’s important to identify a few distinct characteristics. Sliver's key ports: 443: Default…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 54.38.52.14 | High | Score 58/100 | First seen |
| MD5 | 475c9302dc42b2751db9edcac3b74891 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…