Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE9 IOCs
Q3 2026 Statistical Report on Malware Targeting Windows Database Servers
Threat Actors
Malware Families
Diamond Model
Adversary(1)
Infrastructure(4)
Capability(4)
Victim
Indicators of Compromise
Indicators of Compromise9
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 216ae88b735790f27a17a9868e5202b8 file-hashintel-blogmalware | Medium | 53 | Oct 14, 26 |
| Domain | microsftapiedge.com intel-blogmalwarenetwork | High | 58 | Oct 14, 26 |
| IP | 38.60.253.35 botnetintel-blogmalware | High | 86 | Jun 2, 26 |
| MD5 | 3de6a8f367d5d9f0a71fb5f1443c0e8f file-hashintel-blogmalware | Medium | 53 | Oct 14, 26 |
| MD5 | 056ffa80af31d17e0cee037b44e0c7ef file-hashintel-blogmalware | Medium | 53 | Oct 14, 26 |
| MD5 | 0eb0f57afd54c9733c720fbac82b754b file-hashintel-blogmalware | Medium | 53 | Oct 14, 26 |
| IP | 159.223.46.140 botnetintel-blogmalware | High | 86 | Jul 7, 26 |
| Domain | update.microsftapiedge.com intel-blogmalwarenetwork | High | 58 | Oct 14, 26 |
| MD5 | 31595e7e73bde0326a4d5054615249cf file-hashintel-blogmalware | Medium | 53 | Oct 14, 26 |
IOC Relationship Graph
IOC Relationship Graph9 total IOCs
MD5DomainIP