Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
27 IOCs
StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader
Malware Families
Excerpt
Introduction During our research of activity affecting a diplomatic organization in Indonesia, we uncovered a previously undocumented malware family that we have named SharkLoader . What initially appeared to be an isolated case quickly expanded into a broader campaign as we identified additional SharkLoader infections across multiple countries and sectors. Our investigation revealed that SharkLoader serves as a loader designed to deploy Cobalt Strike Beacon on compromised…
Read the original report →Diamond Model
Adversary
Infrastructure(4)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →27 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | a514d1bb62d7916475946fe7c07ac0aa | Low | Score 30/100 | First seen |
| MD5 | d98f568496512e4f98670c61c97cb07a | Medium | Score 53/100 | First seen |
| CVE | CVE-2021-26855 | Medium | Score 59/100 | First seen |
| CVE | CVE-2023-46747 | High | Score 59/100 | First seen |
| MD5 | aa3086be652c8b20b0b29b2730d57119 | Low | Score 32/100 | First seen |
| Domain | ms-record.top | High | Score 69/100 | First seen |
| MD5 | 1f65544978b8ea0e745e573b8ee9684b | High | Score 86/100 | First seen |
| CVE | CVE-2023-32315 | Medium | Score 51/100 | First seen |
| Domain | connect-microsoft.com | High | Score 72/100 | First seen |
| CVE | CVE-2024-21762 | Medium | Score 56/100 | First seen |
| MD5 | 24fcebdeecba65004fdb0923763d74fd | Low | Score 32/100 | First seen |
| CVE | CVE-2022-40684 | Medium | Score 51/100 | First seen |
| MD5 | 9cbd560f820c95d7c38342cd558cb5c6 | Low | Score 30/100 | First seen |
| CVE | CVE-2025-55182 | High | Score 82/100 | First seen |
| CVE | CVE-2021-27076 | Medium | Score 51/100 | First seen |
| CVE | CVE-2022-27925 | Medium | Score 53/100 | First seen |
| Domain | ms-record.com | High | Score 69/100 | First seen |
| CVE | CVE-2016-4437 | Medium | Score 51/100 | First seen |
| CVE | CVE-2024-36401 | Medium | Score 54/100 | First seen |
| MD5 | c559cc68986933200fd5d9e4388e2f58 | High | Score 86/100 | First seen |
| CVE | CVE-2023-20198 | Medium | Score 53/100 | First seen |
| CVE | CVE-2022-41040 | Medium | Score 51/100 | First seen |
| MD5 | 9c872a0d5d5a38950e8b9ac9b488be3f | Medium | Score 53/100 | First seen |
| MD5 | b3352b42432dedc4a519f011dc8b5d5a | Medium | Score 49/100 | First seen |
| Domain | ms-tray.top | High | Score 69/100 | First seen |
| CVE | CVE-2022-41082 | Medium | Score 53/100 | First seen |
| CVE | CVE-2021-36260 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…