Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Malware Families
Excerpt
by Joshua Platt and Jason Reaves [TLP:CLEAR] Earlier this year, Google Threat Intelligence[1] reported threat actors are increasingly deploying novel, AI-enabled malware in active operations[2]. While investigating a recent OSINT article[3] on malware campaign activity reported as “DeepLoad”, our threat intelligence team identified a separate, previously undocumented fileless delivery system we track as “SpectrePaste”. The prior public reporting correctly suspected AI…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →22 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 064b4188e906b3acbd8867d0319f454adcecaa97dadb3f887b0378b74144fb48 | Medium | Score 53/100 | First seen |
| SHA256 | 0f5b381c85e7f688ebcdd865dd3ca08db2f3762e60a3fd867839ff80d7d76170 | Medium | Score 53/100 | First seen |
| SHA256 | 6138ef4de9bcc4bee5a0bc1861125f6a1e85fb623364d27e9ad37b2774a10dbc | Medium | Score 53/100 | First seen |
| IP | 45.156.87.118 | High | Score 58/100 | First seen |
| IP | 95.217.7.38 | High | Score 58/100 | First seen |
| MD5 | 551454b0bb7b49cfebf6017a2a3fe3c1 | Medium | Score 53/100 | First seen |
| IP | 193.143.1.174 | High | Score 58/100 | First seen |
| IP | 139.180.219.180 | High | Score 58/100 | First seen |
| IP | 79.124.49.178 | High | Score 58/100 | First seen |
| SHA256 | 4d39915104528f6b4bb8b27ce96b64857d3d4fdab3b6985e5ac3f38513e8385c | Medium | Score 53/100 | First seen |
| SHA256 | 45e782448f13f388eda0489c90b757af599313fa37232609404b73c49711774d | Medium | Score 53/100 | First seen |
| SHA256 | 05258ce7fb35a3c43eebce79c3ca12498c7eb696f229fd51a8f910f6f68bb82d | Medium | Score 53/100 | First seen |
| IP | 204.168.223.135 | High | Score 58/100 | First seen |
| SHA256 | 59d8647d65984657bdc4ffe7f41626a383ecb7dff7c81c2b1cb321a1fbf0e174 | Medium | Score 53/100 | First seen |
| SHA256 | 44f9bdf1de4875936d782da47dc730e86bb412c59a1d03ee48767c7728561041 | Medium | Score 53/100 | First seen |
| IP | 45.156.87.62 | Medium | Score 62/100 | First seen |
| IP | 45.43.137.82 | High | Score 58/100 | First seen |
| IP | 89.167.92.76 | High | Score 58/100 | First seen |
| SHA256 | aaa75ec6764b9da7e916d887cd598087e1e61a25ce2bf0b191da85e24979e2bd | Medium | Score 53/100 | First seen |
| IP | 89.167.80.106 | High | Score 58/100 | First seen |
| IP | 204.168.153.151 | High | Score 58/100 | First seen |
| SHA256 | dde232cdd5ababf35b30a53f47c2e03dedd77c76963b38919a44940f1303f59a | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…