IOC Radar
TLP:WHITE173 IOCs

AA24-249A: Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure

BO
Botvrij.eu OSINT Feed
Published September 12, 2024Original Report

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTURE154.21.20.82interlinks.topsmm2021.netCAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(6)
Capability
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise173

TypeIndicatorConfidenceScoreFirst Seen
MD5b0d0a23766fa64ece9315f37b28bb4c0
file-hashloadermalware
High
68
Jun 2, 26
MD5911c7e82f32f78577dcd725a7adb114d
file-hashloadermalware
High
68
Jun 2, 26
MD51e22d64f263e8ea4b2d37dcd9b7c3012
file-hashloadermalware
High
68
Jun 2, 26
MD55d063eecd894d3d523875bc82ef6f319
file-hashloadermalware
High
68
Jun 2, 26
MD52128361d8aaae1225d50c9add32006a1
file-hashloadermalware
High
68
Jun 2, 26
MD56a4fca88ee36fecc5113e188cc39d25c
file-hashloadermalware
High
68
Jun 2, 26
MD59f11e915be5c0d02a3130329cf032a28
file-hashloadermalware
High
68
Jun 2, 26
MD56859fe5a3eead00a563cd93efcc6ea96
file-hashloadermalware
High
68
Jun 2, 26
MD58d3d4d702ba6b4be2766a41bfe5ff76e
file-hashloadermalware
High
68
Jun 2, 26
MD594bf96b76c2a092de8962496ce35deaf
file-hashloadermalware
High
68
Jun 2, 26
IP154.21.20.82
indicatornetwork
High
68
Jun 2, 26
Domaininterlinks.top
loadermalwarenetwork
High
68
Jun 2, 26
MD5a9c9c0be8eca3b575c24da0fcf1af1a9
file-hashloadermalware
High
68
Jun 2, 26
Domainsmm2021.net
loadermalwarenetwork
High
68
Jun 2, 26
IP79.124.8.66
loadermalwarenetwork
High
68
Jun 2, 26
MD55b884f15dc9b072d7bbad9ec2b249f38
file-hashloadermalware
High
68
Jun 2, 26
URLhttps://3proxy.ru
networkproxyurl
High
68
Jun 2, 26
MD5e1a15bc13157134f542cd9c55c742460
file-hashloadermalware
High
68
Jun 2, 26
IP194.26.29.251
networkproxy
High
68
Jun 2, 26
MD54c19aeecbfca13b8a199703d8b8284b9
file-hashloadermalware
High
68
Jun 2, 26
MD5eef2363744345741e09fe5380eeb4df3
file-hashloadermalware
High
68
Jun 2, 26
MD595cf2a5a24b0d33d621bb8995d5826bc
file-hashloadermalware
High
68
Jun 2, 26
MD53ccf799ff208981349cee4fb1a1cf88c
file-hashloadermalware
High
68
Jun 2, 26
MD5246f31c86bbbe7f65c0126cf4a1a947a
file-hashloadermalware
High
68
Jun 2, 26
IP179.43.176.60
loadermalwarenetwork
High
68
Jun 2, 26
IP179.43.162.55
networkproxy
High
68
Jun 2, 26
MD5d06761b2cff86035a4838110ed6ab622
file-hashloadermalware
High
68
Jun 2, 26
IP194.26.29.98
networkproxy
High
68
Jun 2, 26
MD51220b580cef1bf22351e271773945d20
file-hashloadermalware
High
68
Jun 2, 26
MD5ffa68749aa3fc6495e2c49b01d964339
file-hashloadermalware
High
68
Jun 2, 26
MD558e879213d81333b628434ba4aeb2751
file-hashloadermalware
High
68
Jun 2, 26
MD5d43446b4a22a597b93b559821ee5ac9b
file-hashloadermalware
High
68
Jun 2, 26
IP194.26.29.84
networkproxy
High
68
Jun 2, 26
MD5875f9200b49db08c33962b0a6bd05ab9
file-hashloadermalware
High
68
Jun 2, 26
MD554a9fa9eb337a3b5ca7b0fa4553e439d
file-hashloadermalware
High
68
Jun 2, 26
MD5246d9f9831b125ea7e6ef21bc4c8a0ca
file-hashloadermalware
High
68
Jun 2, 26
MD57f84263fd24f783ff72d5ae91011b558
file-hashloadermalware
High
68
Jun 2, 26
MD509a2d85e809d36bff82bd5ab773980a3
file-hashloadermalware
High
68
Jun 2, 26
IP81.17.24.130
networkproxy
High
68
Jun 2, 26
MD55eaa7e812733a5c8cda734fab2f752d5
file-hashloadermalware
High
68
Jun 2, 26
MD5422437f326b8dbe30cc5f103bde31f26
file-hashloadermalware
High
68
Jun 2, 26
MD5cd62d4a178705b2b90a8babd8613df93
file-hashloadermalware
High
68
Jun 2, 26
MD53fe96ff4a5ef0f5346ce645a2a893597
file-hashloadermalware
High
68
Jun 2, 26
MD52b2509c6ee46d6327f2f1c9a75122d15
file-hashloadermalware
High
68
Jun 2, 26
MD59152c9de57b5647ee4ab3dff551dc8dd
file-hashloadermalware
High
68
Jun 2, 26
MD59b2924c727aa3a061906321a66c9050c
file-hashloadermalware
High
68
Jun 2, 26
MD556e0446a6d7175a0d09110bc483ddbed
file-hashloadermalware
High
68
Jun 2, 26
MD519cb20c4e7dbfe15c1aa284752d0fecb
file-hashloadermalware
High
68
Jun 2, 26
MD58633bd2bbbb5da22c3f8751150186c42
file-hashloadermalware
High
68
Jun 2, 26
MD503af632aa6f87bf9dd4364ee3b612cbb
file-hashloadermalware
High
68
Jun 2, 26
IP90.131.156.107
loadermalwarenetwork
High
68
Jun 2, 26
MD55f4df6dd8e644d59eaf182e500b5e7bf
file-hashloadermalware
High
68
Jun 2, 26
MD547f4534da421daf8089cf34d53f6bb6e
file-hashloadermalware
High
68
Jun 2, 26
MD5a1b509254a0a1daa7e00d279ec974461
file-hashloadermalware
High
68
Jun 2, 26
MD57a70d5fbbafe3454b76e3ad2f009618f
file-hashloadermalware
High
68
Jun 2, 26
MD508dfebc04eb61c9a6d87b6524c1c0f2e
file-hashloadermalware
High
68
Jun 2, 26
MD54bce4831b1dd71f19c55b3e3b5e99856
file-hashloadermalware
High
68
Jun 2, 26
IP179.43.142.42
loadermalwarenetwork
High
68
Jun 2, 26
MD5f4f4e55a00d2f3a433c9e5624285ac1c
file-hashloadermalware
High
68
Jun 2, 26
MD5ddec2d79f460a881849037336ba8968f
file-hashloadermalware
High
68
Jun 2, 26
MD50dc5ac12f7690db15c99eaabc11b129c
file-hashloadermalware
High
68
Jun 2, 26
MD541871fef433d7b4b89fd226fe3a1a2c0
file-hashloadermalware
High
68
Jun 2, 26
MD55c9e2195d10375b746b6717fdb47b5b9
file-hashloadermalware
High
68
Jun 2, 26
MD5f34f60375bebad861a35b7c4bb0fa1c8
file-hashloadermalware
High
68
Jun 2, 26
MD5251f3a4757d9e4de0499cc30c0bc00a9
file-hashloadermalware
High
68
Jun 2, 26
MD5552d9b79cc544fc6c3e8aa204dd00811
file-hashloadermalware
High
68
Jun 2, 26
MD52b5f159f022109a8de1bc5dd9e3138a0
file-hashloadermalware
High
68
Jun 2, 26
MD5af277ae0fbf6cc20f887696ea4756d46
file-hashloadermalware
High
68
Jun 2, 26
MD5f8ffd1eab6223e31b15d0fd6c3c0472e
file-hashloadermalware
High
68
Jun 2, 26
MD5fa97dbe84ce7717b754795fa89f13dce
file-hashloadermalware
High
68
Jun 2, 26
MD52ca6bcf16ee4293a771a1cf7b7b9ee49
file-hashloadermalware
High
68
Jun 2, 26
MD58cfef66b390f08bdbfd940922cf51650
file-hashloadermalware
High
68
Jun 2, 26
MD56e1394938c2fecad2d4f5b3bcf357ec0
file-hashloadermalware
High
68
Jun 2, 26
IP111.111.111.111
indicatornetwork
High
68
Jun 2, 26
MD58a2ba7f9cb6f65edf65dbe579907551e
file-hashloadermalware
High
68
Jun 2, 26
MD57fe7f33d9b5dbdf3d032d2a10e39f283
file-hashloadermalware
High
68
Jun 2, 26
IP179.43.175.108
networkproxy
High
68
Jun 2, 26
MD5a66b3b22a3619f739b197d0d443b700c
file-hashloadermalware
High
68
Jun 2, 26
MD53bcff990faacbebb8fb470dfe03e2543
file-hashloadermalware
High
68
Jun 2, 26
MD5143594597130e301499e5940a5fb798a
file-hashloadermalware
High
68
Jun 2, 26
MD5dea3ae8225913dd98148fc86cfc3bcbe
file-hashloadermalware
High
68
Jun 2, 26
MD5af85885a74cfe099676af542dcdc5741
file-hashloadermalware
High
68
Jun 2, 26
MD57e0c42d33921a89724424f17c97037bd
file-hashloadermalware
High
68
Jun 2, 26
MD5791a81f31a8e7090a7d5417451e09efa
file-hashloadermalware
High
68
Jun 2, 26
IP185.245.85.251
networkproxy
High
68
Jun 2, 26
MD52e035360971a817b854d7d5a2b008717
file-hashloadermalware
High
68
Jun 2, 26
Domain3237.site
loadermalwarenetwork
High
68
Jun 2, 26
Domaindns.test658324901domain.me
networkproxy
High
68
Jun 2, 26
MD5b32e14a9b7de6c92cd16758fa6e23346
file-hashloadermalware
High
68
Jun 2, 26
MD577aa3f342a0d69fda67c853bcc004d48
file-hashloadermalware
High
68
Jun 2, 26
IP185.245.84.227
networkproxy
High
68
Jun 2, 26
MD532db8abce1618e60441f5c7cf4be0d22
file-hashloadermalware
High
68
Jun 2, 26
MD59657c2ef6ed5229740b125df9ca6c915
file-hashloadermalware
High
68
Jun 2, 26
MD5ad0ca738aa6c987e4ee1a87ff2b8acd5
file-hashloadermalware
High
68
Jun 2, 26
MD5cc4a9db6f250114e26d8d9ba6ab46bc9
file-hashloadermalware
High
68
Jun 2, 26
MD57d3b529db1bd896d9fd877b85cafdc64
file-hashloadermalware
High
68
Jun 2, 26
MD5c9d1677f4f89b95b41591b23a1dc1a63
file-hashloadermalware
High
68
Jun 2, 26
IP112.51.253.153
indicatornetwork
High
68
Jun 2, 26
MD5aecb57e20d2c0b0d9fece2cbcbcc3459
file-hashloadermalware
High
68
Jun 2, 26
MD599305ce01cc2d0f58cd226efb2de893f
file-hashloadermalware
High
68
Jun 2, 26
IP112.132.218.45
indicatornetwork
High
68
Jun 2, 26
MD5d40195a444526eafb0db56d95bf8655d
file-hashloadermalware
High
68
Jun 2, 26
MD52b39eab325906b0a3ab7e584c3d67349
file-hashloadermalware
High
68
Jun 2, 26
MD5de276cf07ccffa18d7ffc35281bca910
file-hashloadermalware
High
68
Jun 2, 26
MD5cee5acbfef7e76f52f40b8ae95199c50
file-hashloadermalware
High
68
Jun 2, 26
MD59d7ab8b0aa669125d9a5adc4f46c56f3
file-hashloadermalware
High
68
Jun 2, 26
IP179.43.175.38
indicatornetwork
High
68
Jun 2, 26
MD5d034fe4c71b16b6d331886c24fef2751
file-hashloadermalware
High
68
Jun 2, 26
MD5332b7f6662e28e3577bd1b269904b940
file-hashloadermalware
High
68
Jun 2, 26
IP179.43.133.202
networkproxy
High
68
Jun 2, 26
MD5343b140977b3f9b227e7e5f82b0fadb5
file-hashloadermalware
High
68
Jun 2, 26
IP46.101.242.222
loadermalwarenetwork
High
68
Jun 2, 26
MD50a2affa6d895baab087b84e93145da35
file-hashloadermalware
High
68
Jun 2, 26
MD5e2cc52273d56ed66c800a726760c1ed0
file-hashloadermalware
High
68
Jun 2, 26
MD5a905d620717f75751aa94ceb88995dbc
file-hashloadermalware
High
68
Jun 2, 26
MD578c855a088924e92a7f60d661c3d1845
file-hashloadermalware
High
68
Jun 2, 26
MD50adc2530cf348c0a3d53a680291a3d67
file-hashloadermalware
High
68
Jun 2, 26
MD50e03103e8110785156105946e48ea9e0
file-hashloadermalware
High
68
Jun 2, 26
MD51934e2ebc64d41e37ef53ea0c075e974
file-hashloadermalware
High
68
Jun 2, 26
IP179.43.189.218
indicatornetwork
High
68
Jun 2, 26
Domainn.lashevychdirekcy.atom.gov.ua.zip
networkproxy
High
68
Jun 2, 26
MD5d6b41747cb035c4c2b08790cd57f0626
file-hashloadermalware
High
68
Jun 2, 26
MD5e21fe98cc8866c0eeecf3549ebcec751
file-hashloadermalware
High
68
Jun 2, 26
MD56c152774f6894407075e6f0a2859bbae
file-hashloadermalware
High
68
Jun 2, 26
MD59935a86108e3ae3f72cd15817601dcc6
file-hashloadermalware
High
68
Jun 2, 26
MD5601c12596dfea84c2113ae5ee59a52ec
file-hashloadermalware
High
68
Jun 2, 26
URLhttps://nssm.cc
networkproxyurl
High
68
Jun 2, 26
MD596964aed18f65a7acae632f358a093f6
file-hashloadermalware
High
68
Jun 2, 26
MD5755dac7edd17fbf5b5c449dd06c02e14
file-hashloadermalware
High
68
Jun 2, 26
MD5fc418fdda06ce5982153766dcefb71d9
file-hashloadermalware
High
68
Jun 2, 26
MD585afdef18d65b0518d709a5a324ea57a
file-hashloadermalware
High
68
Jun 2, 26
MD5d8c04ecd646a1f8537a59f63518ef3c6
file-hashloadermalware
High
68
Jun 2, 26
MD5569c1d31f4c7ec7701d8e4e51b59fe85
file-hashloadermalware
High
68
Jun 2, 26
MD54e9c55c6fe25d61ca4394de794546fab
file-hashloadermalware
High
68
Jun 2, 26
MD57c8cb5598e724d34384cce7402b11f0e
file-hashloadermalware
High
68
Jun 2, 26
MD5e4634ef9bfe7b598b857ad997445b239
file-hashloadermalware
High
68
Jun 2, 26
MD569e58c5ee69f5e5e8a58f4afdd59adfe
file-hashloadermalware
High
68
Jun 2, 26
MD580f0ee332a452172533ad8863bb3bc63
file-hashloadermalware
High
68
Jun 2, 26
MD5b7c1a8d39f46eaf52be90e24565dd6b0
file-hashloadermalware
High
68
Jun 2, 26
MD5d973210977957209f255b58eb1715b12
file-hashloadermalware
High
68
Jun 2, 26
MD5981160dee6cd25fb181e54eca7ff7c22
file-hashloadermalware
High
68
Jun 2, 26
MD55c3b0040e2dece6e17093ae607b79044
file-hashloadermalware
High
68
Jun 2, 26
MD528d571ddb5c04d065dfe1be9604663ba
file-hashloadermalware
High
68
Jun 2, 26
MD5993f01861aff306df44e6475f7886f37
file-hashloadermalware
High
68
Jun 2, 26
MD5032f5642d4fb2fdd74e6f20a13c57746
file-hashloadermalware
High
68
Jun 2, 26
MD5ca43a241042b5fcc305393765ae18e69
file-hashloadermalware
High
68
Jun 2, 26
MD5683546b9171a1ea284a96d1b45d1d823
file-hashloadermalware
High
68
Jun 2, 26
MD5de1bf141976776becd376a0dac400df6
file-hashloadermalware
High
68
Jun 2, 26
IP5.226.139.66
loadermalwarenetwork
High
68
Jun 2, 26
MD5562c337b8caca330da2ea6ae07ee5db6
file-hashloadermalware
High
68
Jun 2, 26
MD54d8343c40be53d6521244fe74393d937
file-hashloadermalware
High
68
Jun 2, 26
IP194.26.29.95
networkproxy
High
68
Jun 2, 26
MD5a5494ffd9efb7c3df59c527076a05e62
file-hashloadermalware
High
68
Jun 2, 26
MD564b9feeccf6c183b9f7138f8fc53acbb
file-hashloadermalware
High
68
Jun 2, 26
IP179.43.187.47
indicatornetwork
High
68
Jun 2, 26
MD5d0b00a6c83ce810ec2763af17e8ab1c4
file-hashloadermalware
High
68
Jun 2, 26
MD577675a24040f10c85112d9a219d5f1c7
file-hashloadermalware
High
68
Jun 2, 26
MD5f73d203bdf924658fd6edf3444c93a50
file-hashloadermalware
High
68
Jun 2, 26
MD5673586594242d99ab02118595e457297
file-hashloadermalware
High
68
Jun 2, 26
MD54074798a621232dc448b65db7b1fdd66
file-hashloadermalware
High
68
Jun 2, 26
IP62.173.140.223
networkproxy
High
68
Jun 2, 26
MD50e6374042b33d78329149a6189a7cb46
file-hashloadermalware
High
68
Jun 2, 26
MD5c265188fdadddb648629e8060601dca7
file-hashloadermalware
High
68
Jun 2, 26
IP45.141.87.11
networkproxy
High
68
Jun 2, 26
MD559da31da4db1aa5f9a5c7c0c151422c8
file-hashloadermalware
High
68
Jun 2, 26
MD51c85c0d044ac837e8939564afac1eb32
file-hashloadermalware
High
68
Jun 2, 26
MD5df4f856f783d23fb01af1e0e64bc0e20
file-hashloadermalware
High
68
Jun 2, 26
MD51cac5c0cb8801e8730447023270d8d56
file-hashloadermalware
High
68
Jun 2, 26
MD5da4d81f9ef3b25ea09f34481d923dd9d
file-hashloadermalware
High
68
Jun 2, 26
MD5fba76f4eb2e7a2eb17193bebe290a198
file-hashloadermalware
High
68
Jun 2, 26
MD57234da8ceafbe6586469f18c03cc1832
file-hashloadermalware
High
68
Jun 2, 26
MD5955e4c198ee58e40fe92cb74ceefdf00
file-hashloadermalware
High
68
Jun 2, 26
MD5540ee8e39150c539fea582b0e77be7b0
file-hashloadermalware
High
68
Jun 2, 26

IOC Relationship Graph

IOC Relationship Graph173 total IOCs
MD5IPDomainURL
MD5141IP25Domain5URL2REPORTAA24-249A: Russian Militar
scroll to zoom · drag to pan · click IOC to open