Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE33 IOCs
Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries
Threat Actors
Malware Families
Diamond Model
Adversary(6)
Infrastructure(6)
Capability(7)
Victim
Indicators of Compromise
33 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | http://webhook.site/890efd8d-6e9e-428a-bcf9-987745d71000 | High | Score 58/100 | First seen |
| SHA256 | 5709e5e1496410d4b9ac5a3bd8be3ec4595f881b4865ebf6e490784b56105645 | Medium | Score 53/100 | First seen |
| SHA256 | 1bff55104206d3f55cd72ca58ffecd2fa620a428c5a3c6987d3c4cc68285d335 | Medium | Score 53/100 | First seen |
| SHA256 | 4a43aacffc2d8d76f7abac729238779b6c99b10ee09f54c2cea1654a91561303 | High | Score 86/100 | First seen |
| SHA256 | a92413d4951a28822ec85e5c0d1948d4160b91388c5f3d86504611fc286a4d13 | High | Score 86/100 | First seen |
| URL | https://185.82.218.119:443/5b73dc69- | High | Score 58/100 | First seen |
| SHA256 | aafbc096e20f259df9166f837d0baf7333f177e6f383ca7cb9215936ecbe7f5e | Medium | Score 53/100 | First seen |
| SHA256 | e94402a9886d4433ccad0ced0cd4f22d055d1f0f7e4155dbec992433eb94e00c | Medium | Score 53/100 | First seen |
| SHA256 | 39d21c1b8ab2f08c75a1cb7d18433a8b207c71ec1d266bb049b54b7eaf01d67b | Medium | Score 53/100 | First seen |
| URL | https://webhook.site/890efd8d-6e9e-428a-bcf9-987745d71000 | High | Score 58/100 | First seen |
| SHA256 | ea525336b787c2fd3dbc4b3e9a3a78f71004e1bd43e2e1ed953edad51118cb72 | Medium | Score 53/100 | First seen |
| SHA256 | 68613e232d0893e61ad29906daee2312bd4c4e940f4d0c9e702e7c35a256d0f7 | Medium | Score 53/100 | First seen |
| URL | https://webhook.site/ca3c058e-3c88-449b-8299-822cd5d5e17c | High | Score 58/100 | First seen |
| URL | https://185.82.218.119:443/5b73dc69-d765-4440-a4d2-e9eb33283eb9 | High | Score 58/100 | First seen |
| MD5 | de063cf3f2e2a83e7b1a277c052a340e | Medium | Score 53/100 | First seen |
| URL | https://185.82.218.119:443/53379b62-8020-41cf-af57-effa6e1e8506 | High | Score 58/100 | First seen |
| IP | 185.82.218.119 | High | Score 58/100 | First seen |
| SHA256 | a3b44405112e6364447e5d96630edfabcf81e5ad37d690c3ebc73770d62aeabd | High | Score 86/100 | First seen |
| SHA256 | 6678049918dda2d5859de0a95e0573fec9496c62bbe72967ae0d3deeb5bda68f | High | Score 86/100 | First seen |
| SHA256 | 1bb1b27e1695c726c7c1d3d4935f9318afc6f5fd9015d7cf3890f0eb7bf8d47e | High | Score 86/100 | First seen |
| SHA256 | 49e276498fc4e7d65ebf9fa2acf64ec2a0c25e75ac621cd6a203d64fb75aa495 | High | Score 86/100 | First seen |
| SHA256 | d74c65e6d35d3b2a80686f059590f919316ecaf4ed539192e904d675ba5c7a40 | Medium | Score 53/100 | First seen |
| SHA256 | 60ef547ebd2f4252e286db762980481b0da23dcd2c84465509735544c0a9c2b3 | High | Score 86/100 | First seen |
| SHA256 | c2c9187033d22d7944ea9298461a0ac693ef2774b4ce08b0955d2aba3646fb44 | Medium | Score 55/100 | First seen |
| URL | https://webhook.site/53379b62-8020-41cf-af57-effa6e1e8506 | High | Score 58/100 | First seen |
| URL | https://webhook.site/5b73dc69-d765-4440-a4d2-e9eb33283eb9 | High | Score 58/100 | First seen |
| SHA256 | 2fceca3460a35eea2b21c47d73c27c27edae95d2ae29ffb4ec2222d1a223b4bd | Medium | Score 53/100 | First seen |
| URL | https://webhook.site/d828b9fc-5435-4b1c-881f-d6350c11d0b6 | High | Score 58/100 | First seen |
| SHA256 | e8be50171436550e1edd8b4946d2adc0870e97465f67526ea252bff0815abcbe | High | Score 86/100 | First seen |
| SHA256 | e068794cf43e381b26c82d746cca107b9f84327a2a8308d5b87ea5529963c4c8 | High | Score 86/100 | First seen |
| URL | https://185.82.218.119:443/ | High | Score 58/100 | First seen |
| SHA256 | 063930af6a4aad06d8f8aab43226bf6dcddd2c79aa505894ee95876cf9254543 | Medium | Score 53/100 | First seen |
| SHA256 | f1cc91e7427a22027f65d31bbee19c54b602d08d7d93e4745b9cea59fa8132ff | Medium | Score 53/100 | First seen |
IOC Relationship Graph
33 total IOCs
URLSHA256MD5IP
scroll to zoom · drag to pan · click IOC to open