Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE21 IOCs
Mirage Kitten targets Middle East and Africa region with new malware
Threat Actors
Malware Families
Diamond Model
Adversary(1)
Infrastructure(6)
Capability(1)
Victim
5W+H Threat Analysis
Analysis unavailable
Indicators of Compromise
Indicators of Compromise21
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | a239e655709a2518dd0b7bdbed163679 exploitfile-hashintel-blog | Medium | 53 | Jul 28, 26 |
| MD5 | c832ecd135781b11f59e3fffb3d2b6ac file-hashintel-blogmalware | Medium | 53 | Jul 28, 26 |
| MD5 | afb1c1583606599c7272cfb33cc6f498 exploitfile-hashintel-blog | Medium | 53 | Jul 28, 26 |
| MD5 | f7d36cc5904a53252d2bb3d21615134f exploitfile-hashintel-blog | Medium | 53 | Jul 28, 26 |
| Domain | global-reds.com aptespionageexploit | High | 69 | Jul 28, 26 |
| MD5 | 5fa15ef96808ea82f0a6176f0bb4b386 exploitfile-hashintel-blog | Medium | 53 | Jul 28, 26 |
| Domain | maadinglobal.com aptespionageexploit | High | 69 | Jul 28, 26 |
| Domain | neexportfolio.com aptespionageexploit | High | 69 | Jul 28, 26 |
| MD5 | ae628efa305387b633dce82f9364875b exploitfile-hashintel-blog | Medium | 53 | Jul 28, 26 |
| MD5 | 42f847597109da2a220391bb09d00676 exploitfile-hashintel-blog | Medium | 53 | Jul 28, 26 |
| MD5 | d09b14a2fe01c7363ecc56f5d046162c exploitfile-hashintel-blog | Medium | 53 | Jul 28, 26 |
| IP | 172.86.98.113 exploitindicatorintel-blog | Low | 31 | Jun 18, 26 |
| Domain | buisness-centeral-transportation.com aptespionageexploit | High | 68 | Jun 3, 26 |
| Domain | realhealthshop.com aptespionageintel-blog | High | 69 | Jul 28, 26 |
| MD5 | c90f0efadbf322e5eb1c4103a38c30e6 exploitfile-hashintel-blog | Medium | 53 | Jul 28, 26 |
| Domain | aecert.org aptespionageintel-blog | High | 69 | Jul 28, 26 |
| Domain | tjconsultingservices.com aptespionageintel-blog | High | 69 | Jul 28, 26 |
| MD5 | 6038d42af0affd1fb263f470c0956f6b exploitfile-hashintel-blog | Medium | 53 | Jul 28, 26 |
| Domain | thehealth-life.com aptespionageexploit | High | 69 | Jul 28, 26 |
| Domain | healthcarezoomcenteral.org aptespionageexploit | High | 69 | Jul 28, 26 |
| Domain | business-deegital.com aptespionageexploit | High | 69 | Jul 28, 26 |
IOC Relationship Graph
IOC Relationship Graph21 total IOCs
MD5DomainIP