IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE1 IOC

AveMariaRAT | WarZoneRAT

RE
RexorVc0
Published June 4, 2023Original Report

Threat Actors

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYFIN7SandwormTA0003INFRASTRUCTURE206.225.104146.70.94.…CAPABILITYunknownVICTIMunknown
Adversary(3)
Infrastructure(1)
Capability
Victim

Indicators of Compromise

Indicators of Compromise1

TypeIndicatorConfidenceScoreFirst Seen
Domain206.225.104146.70.94.395.214.27.90161.129.33.242173.212.207.73104.223.19.96warzonlicen1304.ddns.netdreams2reality.duckdns.orggbotowaya.duckdns.orghelpme20.duckdns.orgnewnex.3utilities.comzpec.ruosairus.duckdns.orglacasadelpan2024.duckdns.org
indicatorintel-blognetwork
High
58
Oct 9, 26

IOC Relationship Graph

IOC Relationship Graph1 total IOCs
Domain
Domain1Actors3REPORTAveMariaRAT | WarZoneRATFIN7SandwormTA0003
scroll to zoom · drag to pan · click IOC to open