Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
4 IOCs
VELETRIX Loader Dissection: Kill Chain Analysis of China-Nexus Telecommunications Infrastructure Targeting
Malware Families
Excerpt
In my work I had the opportunity to analyze a China-Nexus Threat Actor, called Earth Alux , and this research, which only covers the fundamental points of the Kill Chain and the analysis of some components of its Toolkit, was the starting point of a long process of studies on how the Chinese state invested in its Cyber Warfare capabilities in the long term. This long process of studies, which is still ongoing, led me to analyze several China-Nexus Threat Actors and their…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 27c04c7d2d6dbbb80247adae62e76dfa43c39c447f51205e276b064555a6eb84 | Medium | Score 55/100 | First seen |
| SHA256 | c9dc947b793d13c3b66c34de9e3a791d96e34639c5de1e968fb95ea46bd52c23 | High | Score 86/100 | First seen |
| SHA256 | fef69f8747c368979a9e4c62f4648ea233314b5f41981d9c01c1cdd96fb07365 | Medium | Score 55/100 | First seen |
| SHA256 | a15f30f20e3df05032445697c906c3a2accf576ecef5da7fad3730ca5f9c141c | Medium | Score 55/100 | First seen |
IOC Relationship Graph
Building graph…