Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
12 IOCs
Uac 0056 Cyberattack on Ukrainian Authorities Using Graphsteel and Grimplant Malware
Threat Actors
Excerpt
CERT-UA cert.gov.ua/article/38374 general information The Governmental Computer Emergency Response Team of Ukraine CERT-UA received information on the distribution of e-mails on the topic "Wage arrears" among government agencies of Ukraine. Attached to the letter is the document "Wage arrears.xls", which contains legitimate statistics and macros. At the same time, hex-coded data has been added to the mentioned document as an attachment. The macro, after activation, will…
Read the original report →Diamond Model
Adversary(4)
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Open the mindmap →12 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | c83d8b36402639ea3f1ad5d48edc1a22005923aee1c1826afabe27cb3989baa3 | High | Score 76/100 | First seen |
| SHA256 | 99a2b79a4231806d4979aa017ff7e8b804d32bfe9dcc0958d403dfe06bdd0532 | High | Score 76/100 | First seen |
| IP | 194.31.98.124 | High | Score 76/100 | First seen |
| MD5 | 4a5de4784a6005aa8a19fb0889f1947a | High | Score 76/100 | First seen |
| SHA256 | c1afb561cd5363ac5826ce7a72f0055b400b86bd7524da43474c94bc480d7eff | High | Score 76/100 | First seen |
| MD5 | 36ff9ec87c458d6d76b2afbd5120dfae | High | Score 76/100 | First seen |
| SHA256 | 8ffe7f2eeb0cbfbe158b77bbff3e0055d2ef7138f481b4fac8ade6bfb9b2b0a1 | High | Score 76/100 | First seen |
| MD5 | da305627acf63792acb02afaf83d94d1 | High | Score 76/100 | First seen |
| URL | cert.gov.ua/article/38374 | High | Score 76/100 | First seen |
| MD5 | 6b413beb61e46241481f556bb5cdb69c | High | Score 76/100 | First seen |
| MD5 | 06124da5b4d6ef31dbfd7a6094fc52a6 | High | Score 76/100 | First seen |
| SHA256 | 9e9fa8b3b0a59762b429853a36674608df1fa7d7f7140c8fccd7c1946070995a | High | Score 76/100 | First seen |
IOC Relationship Graph
Building graph…