Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

TLP:WHITE12 IOCs

Uac 0056 Cyberattack on Ukrainian Authorities Using Graphsteel and Grimplant Malware

ORKL Threat Library

Diamond Model

Adversary(4)

Infrastructure(2)

Capability

Victim

Type	Indicator	Confidence	Score	First Seen
SHA256	c83d8b36402639ea3f1ad5d48edc1a22005923aee1c1826afabe27cb3989baa3 file-hashloadermalware	High	72	Oct 10, 26
SHA256	99a2b79a4231806d4979aa017ff7e8b804d32bfe9dcc0958d403dfe06bdd0532 file-hashloadermalware	High	72	Oct 10, 26
IP	194.31.98.124 networkproxyresearch	High	72	Oct 10, 26
MD5	4a5de4784a6005aa8a19fb0889f1947a file-hashloadermalware	High	72	Oct 10, 26
SHA256	c1afb561cd5363ac5826ce7a72f0055b400b86bd7524da43474c94bc480d7eff file-hashloadermalware	High	72	Oct 10, 26
MD5	36ff9ec87c458d6d76b2afbd5120dfae file-hashloadermalware	High	72	Oct 10, 26
SHA256	8ffe7f2eeb0cbfbe158b77bbff3e0055d2ef7138f481b4fac8ade6bfb9b2b0a1 file-hashloadermalware	High	72	Oct 10, 26
MD5	da305627acf63792acb02afaf83d94d1 file-hashindicatorresearch	High	72	Oct 10, 26
URL	cert.gov.ua/article/38374 networkresearchurl	High	72	Oct 10, 26
MD5	6b413beb61e46241481f556bb5cdb69c file-hashloadermalware	High	72	Oct 10, 26
MD5	06124da5b4d6ef31dbfd7a6094fc52a6 file-hashloadermalware	High	72	Oct 10, 26
SHA256	9e9fa8b3b0a59762b429853a36674608df1fa7d7f7140c8fccd7c1946070995a file-hashloadermalware	High	72	Oct 10, 26

IOC Relationship Graph12 total IOCs

SHA256IPMD5URL

scroll to zoom · drag to pan · click IOC to open