Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE5 IOCs
From Russia With Code: Disarming Atomic Stealer
Threat Actors
Diamond Model
Adversary(1)
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Indicators of Compromise5
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | bf7512021dbdce0bd111f7ef1aa615d5 file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| MD5 | 57db36e87549de5cfdada568e0d86bff file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | dd8aa38c7f06cb1c12a4d2c0927b6107 file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| IP | 5.42.65.108 intel-blogmalwarenetwork | High | 58 | Oct 9, 26 |
| IP | 185.106.93.154 intel-blogmalwarenetwork | High | 58 | Oct 9, 26 |
IOC Relationship Graph
IOC Relationship Graph5 total IOCs
MD5IP