TLP:WHITE23 IOCs
GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration
Threat Actors
Malware Families
Diamond Model
Adversary(1)
Infrastructure(6)
Capability(3)
Victim
5W+H Threat Analysis
Analysis unavailable
Indicators of Compromise
Indicators of Compromise23
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 8.220.194.108 exploitintel-blogmalware | High | 58 | Jul 17, 26 |
| MD5 | dc506ff7bb72735444fb3703a6bee6d8 exploitfile-hashintel-blog | Medium | 53 | Jul 17, 26 |
| IP | 8.220.214.132 exploitintel-blogmalware | High | 58 | Jul 17, 26 |
| IP | 152.32.160.239 exploitintel-blogmalware | High | 58 | Jul 17, 26 |
| MD5 | d08a059e8b815e3b891505bc8777fc28 exploitfile-hashintel-blog | Medium | 53 | Jul 17, 26 |
| IP | 8.220.193.189 exploitintel-blogmalware | High | 58 | Jul 17, 26 |
| MD5 | 64e9d1950e42bc98486dfd9919463d1c exploitfile-hashintel-blog | Medium | 53 | Jul 17, 26 |
| IP | 152.32.222.113 exploitintel-blogmalware | High | 58 | Jul 17, 26 |
| MD5 | ebffd5a76aaa690bcdb922f82e0bacc5 exploitfile-hashintel-blog | Medium | 53 | Jul 17, 26 |
| IP | 8.220.209.155 exploitintel-blogmalware | High | 58 | Jul 17, 26 |
| MD5 | 19f8befcb035f52bf70094e6b4f5779a exploitfile-hashintel-blog | Medium | 53 | Jul 17, 26 |
| IP | 47.80.22.58 exploitintel-blogmalware | High | 58 | Jul 17, 26 |
| MD5 | 846ef7c1c7323849b2a778c5e4cda162 exploitfile-hashintel-blog | Medium | 53 | Jul 17, 26 |
| MD5 | cbbb6d483737ea3566726e51752dff40 exploitfile-hashintel-blog | Medium | 53 | Jul 17, 26 |
| IP | 144.48.6.46 exploitintel-blogmalware | High | 58 | Jul 17, 26 |
| MD5 | 7f223ee0716ce2ad56f55d3744419449 exploitfile-hashintel-blog | Medium | 53 | Jul 17, 26 |
| MD5 | 31323334353637383930616263646566 c2file-hashintel-blog | Medium | 53 | Jul 17, 26 |
| IP | 43.106.30.226 exploitintel-blogmalware | High | 58 | Jul 17, 26 |
| MD5 | cb6c4c70a3b171fa3404b8e1a3382116 exploitfile-hashintel-blog | Medium | 53 | Jul 17, 26 |
| MD5 | 93a1569d5d5ab2c4761fedf84f83709e exploitfile-hashintel-blog | Medium | 53 | Jul 17, 26 |
| IP | 101.36.104.87 exploitintel-blogmalware | High | 58 | Jul 17, 26 |
| MD5 | d6e86bf8a90e9b632add5fa495f97fbc exploitfile-hashintel-blog | Medium | 53 | Jul 17, 26 |
| IP | 103.138.13.30 exploitintel-blogmalware | High | 58 | Jul 17, 26 |
IOC Relationship Graph
IOC Relationship Graph23 total IOCs
IPMD5