IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE4 IOCs

MetaStealer Part 2, Google Cookie Refresher Madness and Stealer Drama

RU
RussianPanda
Published December 28, 2023Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTURE5.42.65.34CAPABILITYAuroraLummaRaccoonVICTIMunknown
Adversary
Infrastructure(1)
Capability(7)
Victim

Indicators of Compromise

Indicators of Compromise4

TypeIndicatorConfidenceScoreFirst Seen
IP5.42.65.34
intel-blogmalwarenetwork
High
58
Oct 9, 26
MD5b3cca536bf466f360b7d38bb3c9fc9bc
file-hashintel-blogmalware
Medium
53
Oct 9, 26
MD5e6db93b513085fe253753cff76054a2a
file-hashintel-blogmalware
Medium
53
Oct 9, 26
MD5a8d6e729b4911e1a0e3e9053eab2392b
file-hashintel-blogmalware
Medium
53
Oct 9, 26

IOC Relationship Graph

IOC Relationship Graph4 total IOCs
IPMD5
MD53IP1Malware5REPORTMetaStealer Part 2, GoogleAuroraLummaRaccoonRedLineRhadamanthys
scroll to zoom · drag to pan · click IOC to open