Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE44 IOCs
중동을 겨냥한 MuddyWater APT 공격 연대기
Threat Actors
Diamond Model
Adversary(2)
Infrastructure(5)
Capability
Victim
Indicators of Compromise
Indicators of Compromise44
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 4c169dde3bc184c42ca7a712a61c6f3c file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 0873ce3db84b79da935f71df3d6c8e6d file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | c478e472f6223e7ee92cff8b459e55e2 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | cdeb7abfc7775c63745135431272dda3 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 68352f61da6e3236c4fe760997a981ea file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 95d9e6c262632abe004c4693a71eaced file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| MD5 | b9a67ffb81420e68f9e5607cc200604a file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 93be13bbcad30440a0d0ef3868d67003 file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| MD5 | 809334c0b55009c5a50f37e4eec63c43 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | e2d6031afd81bf3b6a44de4d0b039055 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | c381c2cb8fdd6acf1636280b9424f573 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 242098c3e87822bffa7c337987065fbe file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 3ab16bd1c339fd0727be650104b74dd1 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 806adc79e7ea3be50ef1d3974a16b7fb file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 0a95918fd6000a69b8a70609f93e910f file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 7da3d206519086f2725494b3ab095fbb file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | f1c935ce028022ab2a495eae83adacc6 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | c89671f994af65677aa48b699a01fe9d file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 96d5a7e0e75654c444cb1a915c666ac8 file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| MD5 | f97650ede0c39a29b0b5c5472f685d11 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | aba760ec55fdeccb35adb068443feb89 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | b181ecbb7394e3b1394a8c97af65b7e2 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| Domain | screenai.online abuseacademic institutionsactive scan | High | 83 | Sep 3, 25 |
| MD5 | 3a95186019af1943a0ea0f8eb07a288f file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | c5c0829df294cc4fd701df5d5c55718f file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| Domain | nomercys.it.com indicatorintel-blognetwork | High | 58 | Oct 9, 26 |
| MD5 | 1f280f51eeb6cf895fe80082ce725841 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | f6a4c531e92cbdd5ffac75c76939d7f3 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 6d7ce5b03fe61683229c29a859505163 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 74e75830252220cbbe7e3adec4340d2d file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| MD5 | 23d99f912f2491749b89e4fd337273bc file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 64fc017a451ef273dcacdf6c099031f3 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 1e9a4e774b61acc8a6b35ee50417e661 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 75060f5394b72421c0d8f81f79931aa9 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 4055d8b5c2e909f5db8b75a5750a7005 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | ef6ec560efd05d21976a6fd3f489e206 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | aaa9db79b5d6ba319e24e6180a7935d6 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| MD5 | 244a4f81cff4a8dc5872628a40713735 file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| MD5 | 2ed6ebaa28a9bfccc59c6e89a8990631 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| IP | 159.198.66.153 indicatorintel-blognetwork | High | 58 | Oct 9, 26 |
| MD5 | 43be8a405a7f57cf9f910d829c521b21 file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
| IP | 159.198.68.25 intel-blogmalwarenetwork | High | 58 | Oct 9, 26 |
| Domain | stratioai.org intel-blogmalwarenetwork | High | 58 | Oct 9, 26 |
| MD5 | f06e30dee8629e951cefa73373fdef9d file-hashindicatorintel-blog | Medium | 53 | Oct 9, 26 |
IOC Relationship Graph
IOC Relationship Graph44 total IOCs
MD5DomainIP