TLP:WHITE50 IOCs
OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia
Malware Families
Diamond Model
Adversary
Infrastructure(6)
Capability(4)
Victim
5W+H Threat Analysis
Analysis unavailable
Indicators of Compromise
Indicators of Compromise50
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 95.179.210.138 exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| Domain | fm01.clouddevicemetrics.com exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| Domain | confbase.mdpsupport.net exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| IP | 212.11.39.138 exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| MD5 | a4d550a3ba0cd073fe3839b99d98a7a8 exploitfile-hashintel-blog | Medium | 53 | Jul 30, 26 |
| IP | 195.86.120.2 exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| Domain | wedfcvbn.gleeze.com exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| MD5 | 37dc84e4bcad92fa28f1e7778d088283 file-hashintel-blogmalware | Medium | 53 | Jul 30, 26 |
| IP | 45.32.152.50 exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| MD5 | f4578e869a735cfad691f927bae3e638 file-hashintel-blogmalware | Medium | 53 | Jul 30, 26 |
| IP | 45.138.157.165 exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| MD5 | 1415a78b75de7db4ba3d1e61d7db4501 exploitfile-hashintel-blog | Medium | 53 | Jul 30, 26 |
| MD5 | 9a1dd1d96481d61934dcc2d568971d06 file-hashintel-blogmalware | Medium | 53 | Jul 30, 26 |
| MD5 | 082d49ef9f14e6811d68c7e0e82e5069 file-hashintel-blogloader | Medium | 53 | Jul 30, 26 |
| MD5 | 32a5985543433a4f60da2fafd873b927 file-hashintel-blogmalware | Medium | 53 | Jul 30, 26 |
| MD5 | 4e6d5c4770d5a822d7fcce6a74f7ad73 file-hashintel-blogmalware | Medium | 53 | Jul 30, 26 |
| Domain | rgnojb.casacam.net exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| Domain | tj.tajikistandip.com exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| IP | 95.179.141.26 exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| IP | 154.196.162.76 c2intel-blogmalware | High | 58 | Jul 30, 26 |
| Domain | dns.ssentialserv.xyz c2intel-blogmalware | High | 58 | Jul 30, 26 |
| MD5 | 6ecf84fb18f6747ed08d7598364d853a file-hashintel-blogmalware | Medium | 53 | Jul 30, 26 |
| Domain | gycudore.kozow.com intel-blogmalwarenetwork | High | 58 | Jul 30, 26 |
| IP | 45.77.136.228 exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| MD5 | 8269d6ba1b6842f9152c90cf7add9b93 exploitfile-hashintel-blog | Medium | 53 | Jul 30, 26 |
| Domain | tyhbgtyuj.gleeze.com exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| MD5 | 7c2f64461bb519c6cbf1fc687675514c file-hashintel-blogloader | Medium | 53 | Jul 30, 26 |
| MD5 | 62944e26b36b1dcace429ae26ba66164 file-hashintel-blogloader | Medium | 53 | Jul 30, 26 |
| IP | 45.61.149.112 exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| MD5 | 3c9a1ba8e0c7475706adc6376e9d7b7c file-hashintel-blogloader | Medium | 53 | Jul 30, 26 |
| MD5 | 45cf5916fab4272a1313c26e67aa9220 file-hashintel-blogmalware | Medium | 53 | Jul 30, 26 |
| IP | 64.7.198.130 intel-blogmalwarenetwork | High | 58 | Jul 30, 26 |
| MD5 | 2a571f6cee42a17d873f4c942649813f file-hashintel-blogmalware | Medium | 53 | Jul 30, 26 |
| MD5 | a0cc7accc79abb0287aaba825d0351f0 exploitfile-hashintel-blog | Medium | 53 | Jul 30, 26 |
| MD5 | a56cce62930a6bee80d679b4c495a340 exploitfile-hashintel-blog | Medium | 53 | Jul 30, 26 |
| Domain | uyhvfredc.accesscam.org exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| MD5 | 5e26df131ff0a679a0a2699b723b46e3 file-hashintel-blogmalware | Medium | 53 | Jul 30, 26 |
| Domain | ctyuhjerf.kozow.com intel-blogmalwarenetwork | High | 58 | Jul 30, 26 |
| MD5 | b874123a80fc4f40e06872b9cb54ebc6 c2file-hashintel-blog | Medium | 53 | Jul 30, 26 |
| Domain | api2.annoyingremote.com exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| MD5 | 18dc8bff47cc282508354771d0c8cf8c file-hashintel-blogmalware | Medium | 53 | Jul 30, 26 |
| Domain | digital.leroymerling.com exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| MD5 | 2f18472866f38c1e1c2c5c14b9a6ab56 file-hashintel-blogmalware | Medium | 53 | Jul 30, 26 |
| IP | 154.196.187.73 exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| Domain | dns.multitoconference.com intel-blogloadermalware | High | 58 | Jul 30, 26 |
| MD5 | be4731c09734da2e8eb6814a9c82f266 file-hashintel-blogloader | Medium | 53 | Jul 30, 26 |
| Domain | about.blsouqs.com exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| Domain | ssl.blsouqs.com exploitintel-blogmalware | High | 58 | Jul 30, 26 |
| MD5 | ef59aad625eebda8650aec5820d6ce69 file-hashintel-blogloader | Medium | 53 | Jul 30, 26 |
| MD5 | cf903e4a1629aa0582fd0363b5786676 exploitfile-hashintel-blog | Medium | 53 | Jul 30, 26 |
IOC Relationship Graph
IOC Relationship Graph50 total IOCs
IPDomainMD5