IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE3 IOCs

The GlorySprout or a Failed Clone of Taurus Stealer

RU
RussianPanda
Published March 16, 2024Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYPlaySandwormINFRASTRUCTUREunknownCAPABILITYMETA StealerPlayVICTIMunknown
Adversary(2)
Infrastructure
Capability(2)
Victim

Indicators of Compromise

Indicators of Compromise3

TypeIndicatorConfidenceScoreFirst Seen
MD53952a294b831e8738f70c2caea5e0559
file-hashintel-blogmalware
Medium
53
Oct 9, 26
SHA2568996c252fc41b7ec0ec73ce814e84136be6efef898822146c25af2330f4fd04a
file-hashintel-blogmalware
Medium
53
Oct 9, 26
MD5d295c4f639d581851aea8fbcc1ea0989
file-hashintel-blogmalware
Medium
53
Oct 9, 26

IOC Relationship Graph

IOC Relationship Graph3 total IOCs
MD5SHA256
MD52SHA2561Actors2Malware2REPORTThe GlorySprout or a FailePlaySandwormMETA StealerPlay
scroll to zoom · drag to pan · click IOC to open