Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE14 IOCs
UAC-0184: From HTA to a Signed Network Stack
Threat Actors
Diamond Model
Adversary(2)
Infrastructure(5)
Capability
Victim
Indicators of Compromise
Indicators of Compromise14
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | http://169.40.135.35/dctrprraclus.zip intel-blognetworkurl | High | 58 | Jun 2, 26 |
| SHA256 | f5ca9c53d1537142889d7172c6643e886b2164233b91f0fc2d41ca010f035372 file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| URL | http://169.40.135.35/dctrpr/*.hta intel-blognetworkurl | High | 58 | Jun 2, 26 |
| SHA256 | b811f28b844eff8c1f4f931639bed5bcc41113364fdfc44d7703259457839edb file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| URL | http://169.40.135.35/dctrpr/agentdiesel.hta intel-blognetworkurl | High | 58 | Jun 2, 26 |
| SHA256 | 81d93004a02a455af01b0f709e34d5134108ec350f9391dc0f91a00a54998590 file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| SHA256 | df6942dc1a89226359adf1aac597c3b270f4a408214b4f7c2083f9524605e0f7 file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| URL | http://169.40.135.35/dctrpr/slippersuppity.hta intel-blognetworkurl | High | 58 | Jun 2, 26 |
| URL | http://169.40.135.35/dctrpr/basketpast.hta intel-blognetworkurl | High | 58 | Jun 2, 26 |
| SHA256 | 30a5f342c3f9bff21d18b874d51c289a5414837731118e6765dad225c55d5996 file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| SHA256 | dc6cddc391b373b18f105f49a80ff83d53b430d8dea35c1f1576832fa9fbd2b3 file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
| SHA256 | 651b07f731b23e8608eecf87e45194f903c2ccb3fd8b55ea8a6e0ca984ff8518 exploitfile-hashintel-blog | Medium | 53 | Jun 2, 26 |
| SHA256 | d735004496f54a943647a50f42ecdd094cd3d0f58a4ee5d2e36d10c5493337b7 exploitfile-hashintel-blog | Medium | 53 | Jun 2, 26 |
| SHA256 | 33e44dea247eaa8b0fc8ed1f8ed575905f6ce0b7119337ddd29863bbb03288b3 file-hashindicatorintel-blog | Medium | 53 | Jun 2, 26 |
IOC Relationship Graph
IOC Relationship Graph14 total IOCs
URLSHA256