Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
7 IOCs
Threat Actors Weaponizing RAR Archives to Target Thailand’s Healthcare Sector
Excerpt
Authors: Vaibhav Krushna Billade, Dixit Panchal & Rumana Siddiqui. Table of Contents Introduction Key Targets Infection Chain Initial Campaign Findings Technical Analysis Stage 1: Initial Delivery (RAR Archive) Stage 2: Rouki-Obfuscated Batch Loader Stage 3: Startup Persistence Script Stage 4: Secondary Payload Execution Stage 5: Information Stealer Deployment (sim.py) Conclusion Seqrite Coverage Indicators of Compromise (IOCs) MITRE ATT&CK Mapping Introduction…
Read the original report →Indicators of Compromise
Open the mindmap →7 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | f4d4b8cac004bb63834c6df436721babd9464c09787c80b268d839e0aada9f87 | Medium | Score 53/100 | First seen |
| SHA256 | 523388567630e4fbdc359f75232bf2ad82671a680d4bfdce0237fc30dfec4c80 | High | Score 85/100 | First seen |
| SHA256 | 7709d8c34d490509f3624104611eb75a862944dd9d7a642f44514ada16c85ee9 | Medium | Score 53/100 | First seen |
| SHA256 | e5f6d9d405819e6b05b5d8268a2e973294859ad65237ede36ab612b536d0ac2b | Medium | Score 53/100 | First seen |
| SHA256 | 442e0f4e822842922e7e4685840194e99fd68c7f0ec38c1925914b8f724d5865 | High | Score 85/100 | First seen |
| SHA256 | 4eebc38297a307d18784d6f9ebc8aa6e6f69860be970cc70d9e544deb1ff6ce0 | Medium | Score 53/100 | First seen |
| SHA256 | 74bb6ad7e1310f30a3e24fd3cbbffa2c0c41c64e89e5d0dd1d6900e96b914183 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…