Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Unleashing the Viper : A Technical Analysis of WhiteSnake Stealer
Threat Actors
Malware Families
Excerpt
Case Study WhiteSnake Stealer first appeared on hacking forums at the beginning of February 2022. The stealer collects data from various browsers such as Firefox, Chrome, Chromium, Edge, Brave, Vivaldi, CocCoc, and CentBrowser. Besides browsing data, it also collects data from Thunderbird, OBS-Studio, FileZilla, Snowflake-SSH, Steam, Signal, Telegram, Discord, Pidgin, Authy, WinAuth, Outlook, Foxmail, The Bat!, CoreFTP, WinSCP, AzireVPN, WindscribeVPN. The following are…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(5)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | f7b02278a2310a2657dcca702188af461ce8450dc0c5bced802773ca8eab6f50 | Medium | Score 53/100 | First seen |
| SHA256 | c219beaecc91df9265574eea6e9d866c224549b7f41cdda7e85015f4ae99b7c7 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…