Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
13 IOCs
The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents
Malware Families
Excerpt
Introduction Torrent trackers have long been abused for distributing malicious software, disguised as popular films, games, and other content. Our previous research has shown that cybercriminals repeatedly turn torrents as an initial infection vector, using trojanized cracks and installers to reach a large number of users. Installation guides for pirated software routinely instruct users to disable their antivirus, conditioning them to ignore potential threats they are…
Read the original report →Diamond Model
Adversary
Infrastructure(5)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →13 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 4843f9fafcae492f11e2d4d33dbb4cdd | Medium | Score 53/100 | First seen |
| URL | http://193.23.118.155 | High | Score 58/100 | First seen |
| MD5 | 4334bbaea8de33bf9d845e9b4e4e3bc2 | Medium | Score 53/100 | First seen |
| Domain | itorrents.org | High | Score 58/100 | First seen |
| MD5 | a0b13781edd7cfdab13d79afff3c83c1 | Medium | Score 53/100 | First seen |
| MD5 | d0b967571ac8a3863c7f324bf5bde99c | Medium | Score 53/100 | First seen |
| IP | 208.64.33.90 | High | Score 58/100 | First seen |
| URL | https://deadhub.org | High | Score 58/100 | First seen |
| MD5 | d88d550d0fb8e60cffff3ea61ff7a067 | Medium | Score 53/100 | First seen |
| IP | 208.94.246.53 | High | Score 58/100 | First seen |
| MD5 | 5310cabae3fbe6db8742849b588093f9 | Medium | Score 53/100 | First seen |
| MD5 | 70060341caf3338697a7ddfe0fb62875 | Medium | Score 53/100 | First seen |
| MD5 | ad4643eea15ac286fa47d1131f9ef756 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…