Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE4 IOCs
Return of Shai-Hulud: The “Second Coming” of the NPM Supply Chain Compromise
Threat Actors
Malware Families
Diamond Model
Adversary(1)
Infrastructure
Capability(3)
Victim
Indicators of Compromise
Indicators of Compromise4
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | f834301562964d4eba8eb58e8204315f file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| SHA1 | 16f766887ffda24e6cf41bbb3d900ada4aa1d881 file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| SHA256 | dde38c953e6fe119ebde4be3321ee547038ec555c4e9e5e9cc30b9a309a59383 file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
| SHA1 | 5595cbd56d1df1f15d859f5535d5c157f26b81df file-hashintel-blogmalware | Medium | 53 | Oct 9, 26 |
IOC Relationship Graph
IOC Relationship Graph4 total IOCs
MD5SHA1SHA256