Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE5 IOCs
New SETTRA Ransomware Wipes Recovery Options Before Locking Windows Files
Diamond Model
Adversary
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Indicators of Compromise5
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 45.13.122.7 c2intel-blogmalware | High | 58 | Sep 18, 26 |
| MD5 | 3eb6f92aedf74f109c7b4b0897ec39a8 aptespionageexploit | High | 81 | Jun 11, 26 |
| MD5 | a77095b3011b4968a0d266b7687c3320 aptespionageexploit | Medium | 53 | Sep 18, 26 |
| IP | 193.5.65.114 intel-blognetworkproxy | High | 58 | Sep 18, 26 |
| MD5 | b34c9396f612482ca0ef90dabc775a49 aptespionageexploit | Medium | 53 | Sep 18, 26 |
IOC Relationship Graph
IOC Relationship Graph5 total IOCs
IPMD5