Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE13 IOCs
Operation GriefLure: Dissecting an APT Campaign Targeting Vietnam’s Military Telecom & Philippine Healthcare
Diamond Model
Adversary
Infrastructure(3)
Capability
Victim
Indicators of Compromise
Indicators of Compromise13
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 197f11a7b0003aa7da58a3302cfa2a96a670de91d39ddebc7a51ac1d9404a7e6 file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| SHA256 | bc090d75f51c293d916c40d4b21094faaec191a42d97448c92d264875bf1f17b file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| SHA256 | ee6330870087f66a237a7f7c115b65beb042299f12eae1e9004e016686d0c387 file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| SHA256 | 7f80add94ee8107a79c87a9b4ccbd33e39eccd1596748a5b88629dd6ac11b86d file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| SHA256 | bc83817c6d2bf8df1d58eac946a12b5e2566b2ffe15cf96f37c711c4b755512b file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| SHA256 | 91a15554ec9e49c00c5ca301f276bd79d346968651d54204743a08a3ca8a5067 file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| IP | 38.54.122.188 exploitintel-blognetwork | High | 58 | Jun 2, 26 |
| Domain | www.whatsappcenter.com intel-blogmalwarenetwork | High | 58 | Jun 2, 26 |
| SHA256 | a49155df50963d2412534090bbd967749268bd013881ddb81d78b87f91cdc15b file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| Domain | whatsappcenter.com intel-blogmalwarenetwork | High | 58 | Jun 2, 26 |
| SHA256 | 61e9d76f07334843df561fe4bac449fb6fdaed5e5eb91480bded225f3d265c5f file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| SHA256 | 35af2cf5494181920b8624c7b719d39590e2a5ff5eaa1a2fa1ba86b2b5aa9b43 file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| SHA256 | f34f550147c2792c1ff2a003d15be89e5573f0896c5aa6126068baa4621ef416 file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
IOC Relationship Graph
IOC Relationship Graph13 total IOCs
SHA256IPDomain