Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE41 IOCs
BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace
Threat Actors
Malware Families
Diamond Model
Adversary(34)
Infrastructure
Capability(41)
Victim
Indicators of Compromise
Indicators of Compromise41
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2023-1389 exploitintel-blogloader | High | 77 | Oct 9, 26 |
| CVE | CVE-2025-49704 exploitintel-blogloader | High | 77 | Oct 9, 26 |
| SHA256 | f775fe06a4c2563cb03e1aa42eb4e9532840cce9dc168ea2ca97cee7972e6b17 file-hashintel-blogloader | Medium | 53 | Oct 9, 26 |
| CVE | CVE-2022-30190 exploitintel-blogloader | High | 77 | Jun 12, 26 |
| CVE | CVE-2025-0994 exploitintel-blogloader | High | 77 | Oct 9, 26 |
| SHA256 | 0cd0cc49ea4ff48c675368f725e183608494f22fefa92d2f33577f70bb6c0d5d file-hashintel-blogloader | Medium | 53 | Oct 9, 26 |
| SHA256 | 0fa785bb9f95b113539bb909da88e6cac9a433a07935571d9bcd2d85746fc5bf file-hashintel-blogloader | Medium | 53 | Oct 9, 26 |
| SHA256 | 91f225dcc7a01f926b03e8540d8b5e2d6c8e3763cc30f57381d702ce638fa6b0 file-hashintel-blogloader | Medium | 53 | Oct 9, 26 |
| CVE | CVE-2022-47986 exploitintel-blogloader | High | 77 | Oct 9, 26 |
| CVE | CVE-2025-55182 aptespionageexploit | High | 80 | Jun 2, 26 |
| SHA256 | c4dd46e5b450349fd9fbf686a5a22f55f8371123b098104db663a3980646e138 file-hashintel-blogloader | Medium | 53 | Oct 9, 26 |
| CVE | CVE-2021-3493 exploitintel-blogloader | High | 77 | Oct 9, 26 |
| SHA256 | 1510823e7c80b4db5333dd18cd5992881496da30032d6d69b2a82e1c5cf30246 file-hashintel-blogloader | Medium | 53 | Oct 9, 26 |
| SHA256 | 3f2f48525cf082672e38808480e214775e03dd943ff2df86172665aad96a5eaa file-hashintel-blogloader | Medium | 53 | Oct 9, 26 |
| CVE | CVE-2023-34362 aptespionageexploit | High | 78 | Sep 3, 26 |
| CVE | CVE-2025-3248 botnetddosexploit | High | 79 | Jun 29, 26 |
| SHA256 | 10de6185e31539cf01c8b05d9559e65e8693efd695f315de54667ef8c04de39c file-hashintel-blogloader | Medium | 53 | Oct 9, 26 |
| CVE | CVE-2025-53770 exploitintel-blogloader | High | 79 | Jun 12, 26 |
| CVE | CVE-2022-31199 exploitintel-blogloader | High | 77 | Oct 9, 26 |
| CVE | CVE-2021-21974 exploitintel-blogloader | High | 81 | Oct 9, 26 |
| SHA256 | 54e313434a7f3fa349e439857e23ab536a95c9927cf62f8358b5cdd9fabf2700 file-hashintel-blogloader | Medium | 53 | Oct 9, 26 |
| CVE | CVE-2022-21894 exploitintel-blogloader | High | 77 | Oct 9, 26 |
| SHA256 | d881a60ccd03b5417a1eed184143a18a333e7e9e9e351596a7a765843643af99 file-hashintel-blogloader | Medium | 53 | Oct 9, 26 |
| CVE | CVE-2025-49706 exploitintel-blogloader | High | 77 | Oct 9, 26 |
| CVE | CVE-2023-46604 exploitintel-blogloader | High | 78 | Aug 27, 26 |
| CVE | CVE-2021-4034 exploitintel-blogloader | High | 78 | Jun 2, 26 |
| CVE | CVE-2022-26134 exploitintel-blogloader | High | 77 | Oct 9, 26 |
| CVE | CVE-2023-2868 exploitintel-blogloader | High | 77 | Jun 2, 26 |
| SHA256 | 67fcfbdaab397ad1273135a3c6aa1d220ab76491cf945df081503401cc9732d2 file-hashintel-blogloader | Medium | 53 | Oct 9, 26 |
| CVE | CVE-2024-3400 aptespionageexploit | High | 79 | Jun 2, 26 |
| CVE | CVE-2023-22518 aptespionageexploit | High | 81 | Oct 9, 26 |
| CVE | CVE-2024-21412 exploitintel-blogloader | High | 77 | Oct 9, 26 |
| SHA256 | bc91f90a5677404cf9c8f4bed7b36c22027b1549ffefee129b41fab3db3108b8 file-hashintel-blogloader | Medium | 53 | Oct 9, 26 |
| CVE | CVE-2021-33044 exploitintel-blogloader | High | 78 | Jul 30, 26 |
| CVE | CVE-2026-21509 aptespionageexploit | High | 79 | Jun 2, 26 |
| CVE | CVE-2017-7921 exploitintel-blogloader | High | 77 | Jun 3, 26 |
| CVE | CVE-2024-7344 exploitintel-blogloader | High | 77 | Oct 9, 26 |
| CVE | CVE-2023-36025 exploitintel-blogloader | High | 77 | Oct 9, 26 |
| CVE | CVE-2025-53771 exploitintel-blogloader | High | 81 | Oct 9, 26 |
| CVE | CVE-2024-40766 exploitintel-blogloader | High | 79 | Sep 9, 26 |
| CVE | CVE-2025-21042 exploitintel-blogloader | High | 77 | Oct 9, 26 |
IOC Relationship Graph
IOC Relationship Graph41 total IOCs
CVESHA256