IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE2 IOCs

Technical Analysis of 2cloader | Threatlabz

OT
ORKL Threat Library
Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREaware-cr1.comCAPABILITYCobalt StrikeVidarVICTIMunknown
Adversary
Infrastructure(1)
Capability(2)
Victim

Indicators of Compromise

Indicators of Compromise2

TypeIndicatorConfidenceScoreFirst Seen
Domainaware-cr1.com
botnetmalwarenetwork
High
67
Oct 9, 26
MD518c070b8d032336a244440df1115123d
file-hashintel-blogloader
High
61
Oct 9, 26

IOC Relationship Graph

IOC Relationship Graph2 total IOCs
DomainMD5
Domain1MD51Malware2REPORTTechnical Analysis of 2cloCobalt StrikeVidar
scroll to zoom · drag to pan · click IOC to open