Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE3 IOCs
WinRAR ADS Path Traversal Lets UAC-0226 Deploy GIFTEDCROOK Against Ukrainian Targets
Diamond Model
Indicators of Compromise
Indicators of Compromise3
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 420f1931af9b3f7d02c5edfc78eb69abdad6e71d2c3e9b81f9cbc3823a503654 botnetfile-hashintel-blog | High | 86 | Jun 23, 26 |
| SHA256 | dc4c906e56ecb446cbb10b227e1fb470e428108584678314533d80e52a2b9b30 exploitfile-hashintel-blog | High | 56 | Jun 25, 26 |
| CVE | CVE-2023-38831 exploitintel-blogmalware | Medium | 56 | Jun 26, 26 |
IOC Relationship Graph
IOC Relationship Graph3 total IOCs
SHA256CVE