Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE15 IOCs
Infrastructure Destruction Squad / BLACKNET-00: Ransomware, Firebase and ICS Tooling
Malware Families
Diamond Model
Adversary
Infrastructure
Capability(3)
Victim
Indicators of Compromise
Indicators of Compromise15
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 9feebfea9b7a983b8d21757ac0d96015 exploitfile-hashintel-blog | Medium | 53 | Oct 9, 26 |
| SHA256 | 90c447f864f4d66a6b99a76af0db4debf12735ebc3e35525936a4232b2df5732 exploitfile-hashintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 351592d5ead6df0859b0cc0056827c95 file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| SHA256 | 10e41edc96bafe6511a06832519823d0a1bf329fecde1d7d2ab9b2eda3a27a09 exploitfile-hashintel-blog | Medium | 53 | Oct 9, 26 |
| SHA256 | 5f1ebc84cdee3a4e97c530ff2ffc907e903544b8b5b119f9de2e9bd035058629 file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| MD5 | f6cf915e5c2864b7ccff0a57a504dffc exploitfile-hashintel-blog | Medium | 53 | Oct 9, 26 |
| SHA1 | 18e14a1e9ba76fa8c7f89e14ea971c11307af23b file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| MD5 | 28c62e5e820de249ddfb9204fec31bbc file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| MD5 | 6c3446e26d566657ea019ca1b37156d6 file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| SHA1 | 974d8934bd369e98d3e282b2cd3cfe56f6f12ec6 exploitfile-hashintel-blog | Medium | 53 | Oct 9, 26 |
| SHA256 | 61219ea5cd69fb4fbf20cb304673cecfd42d2251aa3b4c7e6f6b36a52ba9013e exfiltrationfile-hashintel-blog | Medium | 53 | Oct 9, 26 |
| SHA1 | 7cf1272de9e478464807e890c68c94600930e724 file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| CVE | CVE-2019-0708 aptespionageexploit | Medium | 55 | Jul 28, 26 |
| SHA1 | 25029760457873fe8339736534f184cea0b20535 exploitfile-hashintel-blog | Medium | 53 | Oct 9, 26 |
| SHA256 | 85adbf2a80b13a55e19114203af3151b0fa9aaef195b316a7b18b571994be21a file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
IOC Relationship Graph
IOC Relationship Graph15 total IOCs
MD5SHA256SHA1CVE