Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE23 IOCs
Botnet Rising Star: The Evolution and In-Depth Technical Analysis of Dysphoria
Threat Actors
Malware Families
Diamond Model
Adversary(1)
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Indicators of Compromise23
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA1 | e7e1694162639ed587625432a79cfaa49f560d11 botnetfile-hashintel-blog | High | 83 | Jul 28, 26 |
| SHA1 | b0782a9d6eef2ce02f734a6e5e1d8e0f9a2b65be botnetfile-hashintel-blog | High | 83 | Jul 28, 26 |
| CVE | CVE-2016-20016 exploitintel-blogmalware | Medium | 50 | Aug 2, 26 |
| CVE | CVE-2025-34152 botnetexploitintel-blog | Medium | 54 | Oct 9, 26 |
| CVE | CVE-2022-35733 botnetexploitintel-blog | Medium | 54 | Oct 9, 26 |
| SHA1 | 9c1716d770ea69e8e1418d96d52222396ecb4362 file-hashintel-blogmalware | High | 83 | Jul 28, 26 |
| SHA1 | 25081bdec05f64eb4f313420c82d8de957e30026 file-hashintel-blogmalware | High | 83 | Jul 28, 26 |
| SHA1 | 8db6c78533c176f13b61405cdc3f8fad703325f1 file-hashintel-blogmalware | High | 83 | Jul 28, 26 |
| CVE | CVE-2013-3307 ddosexploitintel-blog | High | 63 | Jun 23, 26 |
| SHA1 | a3b9575897c16cbf6afe3af1aa8b55171ea6edf9 file-hashintel-blogmalware | High | 83 | Jul 28, 26 |
| CVE | CVE-2025-55182 aptbotnetc2 | High | 82 | Jun 2, 26 |
| CVE | CVE-2020-25499 botnetexploitintel-blog | Medium | 54 | Oct 9, 26 |
| CVE | CVE-2018-14558 botnetexploitintel-blog | Medium | 54 | Oct 9, 26 |
| CVE | CVE-2020-8515 botnetexploitintel-blog | Medium | 52 | Oct 9, 26 |
| SHA1 | 955ff909972958098f0d4a06bcc4d6b9eea90449 file-hashintel-blogmalware | High | 83 | Jul 28, 26 |
| CVE | CVE-2025-28137 botnetexploitintel-blog | Medium | 54 | Oct 9, 26 |
| SHA1 | 73651c02b29f1c07e3177e86c967fc45e9f30f0f file-hashintel-blogmalware | High | 83 | Jul 28, 26 |
| CVE | CVE-2025-9528 exploitintel-blogmalware | Medium | 54 | Oct 9, 26 |
| SHA1 | c1bedea261f325441fb9a75c50b11d0c8fb01ac6 file-hashintel-blogmalware | High | 83 | Jul 28, 26 |
| SHA1 | dcea71b9ab9de8efca301de9e2f7bf11c7132364 file-hashintel-blogmalware | High | 83 | Jul 28, 26 |
| CVE | CVE-2017-5259 exploitintel-blogmalware | Medium | 54 | Oct 9, 26 |
| SHA1 | b7faa44ab0772047a8581bbfdd9c561e28fc66de file-hashintel-blogmalware | High | 83 | Jul 28, 26 |
| SHA1 | df510f6f69a5c149c216c7b3accc4f460d8cf363 file-hashintel-blogmalware | High | 83 | Jul 28, 26 |
IOC Relationship Graph
IOC Relationship Graph23 total IOCs
SHA1CVE