Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Malware Families
Excerpt
https://research.checkpoint.com/2020/threat-actors-migrating-to-the-cloud/ Threat Actors Migrating to the Cloud By alexeybu Published: 2020-04-10 · Archived: 2026-10-27 02:09:42 UTC Where do malware payloads come from? It’s a question with an apparently trivial answer. Usually these sit on dedicated servers owned by the campaign managers, and occasionally on a legitimate website that has been broken into and commandeered. But, as we were recently reminded, there is a third…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →24 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | http://alaziz.in/a/00.bin | High | Score 67/100 | First seen |
| MD5 | c1730abe51d8eed05234a74118dfdd6a | High | Score 67/100 | First seen |
| MD5 | e63232ba23f4da117e208d8c0bf99390 | High | Score 67/100 | First seen |
| MD5 | 61cfb93ff1d5d301aeb716509a02e4b6 | High | Score 67/100 | First seen |
| Domain | sendspace.com | High | Score 67/100 | First seen |
| URL | https://share.dmca.gripe/iQEkn0067f3MvpRm.bin | High | Score 67/100 | First seen |
| MD5 | 232da2765bbf79ea4a51726285cb65d1 | High | Score 67/100 | First seen |
| MD5 | ad9c9e0a192f7620a065b0fa01ff2d81 | High | Score 67/100 | First seen |
| URL | https://taxagent.gr/wp-includes/ID3/Host_encrypted_135E9B0.bin | High | Score 67/100 | First seen |
| MD5 | 760f167f44be7fc19c7866db89ba76d5 | High | Score 67/100 | First seen |
| MD5 | df6e0bc9e9a9871821374d9bb1e12542 | High | Score 67/100 | First seen |
| MD5 | 9f4e7577922baa06d75a4a8610800661 | High | Score 67/100 | First seen |
| Domain | anonfile.com | High | Score 67/100 | First seen |
| URL | http://raacts.in/a/00.bin | High | Score 67/100 | First seen |
| URL | https://cdn-12.anonfile.com/RdO1lcdaod/77814bdf-1582785178/makave | High | Score 67/100 | First seen |
| MD5 | cf3e7341f48bcc58822c4aecb4eb6241 | High | Score 67/100 | First seen |
| MD5 | d621b39ec6294c998580cc21f33b2f46 | High | Score 67/100 | First seen |
| Domain | grannys-cake-recipes.net | High | Score 67/100 | First seen |
| URL | https://cdn.filesend.jp/private/9gBe6zzNRaAJTAAl1A3VRa8_Gs0yw1ViOupoQM8N7njTTXNKTBoZTTlc | High | Score 67/100 | First seen |
| URL | http://biendaoco.com/wp-content/plugins/revslider/admin/POORDER.bin | High | Score 67/100 | First seen |
| MD5 | ad419a39769253297b92f09e88e97a07 | High | Score 67/100 | First seen |
| Domain | files.fm | High | Score 67/100 | First seen |
| Domain | wscript.shell | High | Score 88/100 | First seen |
| URL | https://cdn.filesend.jp/private/hcmyj5nD6aJkDXptSilmcc1iHGLaXs0QTpyQDASA5AqNsWXFkzdNappNJ | High | Score 67/100 | First seen |
IOC Relationship Graph
Building graph…