Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
18 IOCs
The Abuse of ITarian RMM by Dolphin Loader
Malware Families
Excerpt
Dolphin Loader A few days ago I was looking at the sample from Dolphin Loader and couldn’t understand for awhile how it was able to retrieve the final payload because the payload was not able to fully complete the execution chain. Recently someone sent me a fresh working sample, so I had a little “hell yeah!” moment. Before looking into the abuse of ITarian RMM software, we should talk a little bit about Dolphin Loader. Dolphin Loader is a new Malware-as-a-Service loader that…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability(3)
Victim
Indicators of Compromise
Open the mindmap →18 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | a504ca75b88e18b18509cb44acb27631 | Medium | Score 53/100 | First seen |
| Domain | bassizcellskz.shop | High | Score 63/100 | First seen |
| Domain | mennyudosirso.shop | High | Score 63/100 | First seen |
| MD5 | 0f8f5de30b3560e08fcbfdb8e740748d | Medium | Score 53/100 | First seen |
| MD5 | 91584a4b3f28029ecdfb9f04e3cc801f | Medium | Score 53/100 | First seen |
| MD5 | f740670bd608f6a564366606e0bba8da | Medium | Score 53/100 | First seen |
| MD5 | d01de188808d566745d1ce888b431910 | Medium | Score 53/100 | First seen |
| URL | https://houseofgoodtones.org/richardmilliestpe/Aunteficator_em_BHdAOse8_installer_Win7-Win11_x86_x64.msi | High | Score 58/100 | First seen |
| Domain | quialitsuzoxm.shop | High | Score 64/100 | First seen |
| MD5 | a674a4ac02d85b5b208f17a5b5655c30 | Medium | Score 53/100 | First seen |
| MD5 | 8259de1408aae0f9ddeb85b2f47cfa30 | Medium | Score 53/100 | First seen |
| Domain | pieddfreedinsu.shop | High | Score 58/100 | First seen |
| MD5 | a2b4081e6ac9d7ff9e892494c58d6be1 | Medium | Score 53/100 | First seen |
| Domain | complaintsipzzx.shop | High | Score 63/100 | First seen |
| Domain | languagedscie.shop | High | Score 63/100 | First seen |
| MD5 | 5b295738eaf3c6aa623e2699f6d79e3a | Medium | Score 53/100 | First seen |
| MD5 | f227b281d745d53fcb06fe2bf7de7d26 | Medium | Score 53/100 | First seen |
| MD5 | a295cf96ebabdfa1d30424e72ed6d4df | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…