TLP:WHITE6 IOCs
Behind the Refund: From GST Phishing to Remcos RAT Through a Multi-Stage .NET Infection Chain
Malware Families
Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
5W+H Threat Analysis
Analysis unavailable
Indicators of Compromise
Indicators of Compromise6
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 3757dccb2adae65ccdf8d5e5c948b927 file-hashintel-blogloader | Medium | 53 | Jul 18, 26 |
| MD5 | cc34d9760394104ad47877a0d57e9c63 file-hashintel-blogmalware | Medium | 53 | Jul 18, 26 |
| MD5 | 7842d12d9e37c75076133be5b9904cb2 file-hashintel-blogmalware | Medium | 53 | Jul 18, 26 |
| MD5 | 07d7d21c2c0920d198efb9ea54900a80 file-hashintel-blogmalware | Medium | 53 | Jul 18, 26 |
| MD5 | 20476f3a51dfddf3dc0603fc7858d894 file-hashintel-blogmalware | Medium | 53 | Jul 18, 26 |
| MD5 | 2a34bdd25b404737ee5d3b52bf0b3b70 file-hashintel-blogmalware | Medium | 53 | Jul 18, 26 |
IOC Relationship Graph
IOC Relationship Graph6 total IOCs
MD5