Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Malware Families
Excerpt
Stealc Stealer Analysis Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth’s statement, Stealc is a non-resident stealer with flexible data collection settings, and its development relies on other prominent stealers: Vidar, Raccoon, Mars, and Redline Stealc exhibits the ability to exfiltrate a wide range of data from the victim…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability(5)
Victim
Indicators of Compromise
Open the mindmap →17 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://185.247.184.7/8c3498a763cc5e26.php | High | Score 58/100 | First seen |
| MD5 | 9375cff0413111d3b88a00104b2a6676 | High | Score 56/100 | First seen |
| URL | http://179.43.162.2/d8ab11e9f7bc9c13.php | High | Score 58/100 | First seen |
| SHA256 | 1e09d04c793205661d88d6993cb3e0ef5e5a37a8660f504c1d36b0d8562e63a2 | Medium | Score 53/100 | First seen |
| SHA256 | 77d6f1914af6caf909fa2a246fcec05f500f79dd56e5d0d466d55924695c702d | Medium | Score 53/100 | First seen |
| URL | http://94.142.138.48/f9f76ae4bb7811d9.php | High | Score 58/100 | First seen |
| URL | http://23.88.116.117/api.php | High | Score 58/100 | First seen |
| URL | http://fff-ttt.com/984dd96064cb23d7.php | High | Score 58/100 | First seen |
| URL | http://162.0.238.10/752e382b4dcf5e3f.php | High | Score 58/100 | First seen |
| URL | http://moneylandry.com/bef7fb05c9ef6540.php | High | Score 58/100 | First seen |
| URL | http://185.5.248.95/api.php | High | Score 58/100 | First seen |
| URL | http://95.216.112.83/413a030d85acf448.php | High | Score 58/100 | First seen |
| URL | http://moneylandry.com/2ccaf544c0cf7de7 | High | Score 58/100 | First seen |
| URL | http://185.247.184.7/8c3498a763cc5e26.php | High | Score 58/100 | First seen |
| URL | http://185.5.248.95/c1377b94d43eacea.php | High | Score 58/100 | First seen |
| URL | http://aa-cj.com/6842f013779f3d08.php | High | Score 58/100 | First seen |
| SHA256 | 87f18bd70353e44aa74d3c2fda27a2ae5dd6e7d238c3d875f6240283bc909ba6 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…