Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE2 IOCs
Hackers Use Fake Zoom and PDF Installers to Deploy Remote Access Tools on Windows PCs
Diamond Model
Indicators of Compromise
Indicators of Compromise2
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 108ef7e628d7a20bd6241a5b57149e27a6061f467123eb64061975559f8f73dc botnetfile-hashintel-blog | High | 83 | Jul 21, 26 |
| SHA1 | f34330d4c6e0aa978dc3af40360c14b31ad51127 file-hashintel-blogmalware | High | 56 | Sep 30, 26 |
IOC Relationship Graph
IOC Relationship Graph2 total IOCs
SHA256SHA1