mirror of
https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_Collections
synced 2024-06-20 05:49:59 +00:00
49 lines
1.6 KiB
Plaintext
49 lines
1.6 KiB
Plaintext
Indicators of Compromise (IoC)
|
|
|
|
IP addresses of BlackEnergy C2-servers:
|
|
5.149.254.114
|
|
5.9.32.230
|
|
31.210.111.154
|
|
88.198.25.92
|
|
146.0.74.7
|
|
188.40.8.72
|
|
XLS document with malicious macro SHA-1:
|
|
AA67CA4FB712374F5301D1D2BAB0AC66107A4DF1
|
|
BlackEnergy Lite dropper SHA-1:
|
|
4C424D5C8CFEDF8D2164B9F833F7C631F94C5A4C
|
|
BlackEnergy Big dropper SHA-1:
|
|
896FCACFF6310BBE5335677E99E4C3D370F73D96
|
|
BlackEnergy drivers SHA-1:
|
|
069163E1FB606C6178E23066E0AC7B7F0E18506B
|
|
0B4BE96ADA3B54453BD37130087618EA90168D72
|
|
1A716BF5532C13FA0DC407D00ACDC4A457FA87CD
|
|
1A86F7EF10849DA7D36CA27D0C9B1D686768E177
|
|
1CBE4E22B034EE8EA8567E3F8EB9426B30D4AFFE
|
|
20901CC767055F29CA3B676550164A66F85E2A42
|
|
2C1260FD5CEAEF3B5CB11D702EDC4CDD1610C2ED
|
|
2D805BCA41AA0EB1FC7EC3BD944EFD7DBA686AE1
|
|
4BC2BBD1809C8B66EECD7C28AC319B948577DE7B
|
|
502BD7662A553397BBDCFA27B585D740A20C49FC
|
|
672F5F332A6303080D807200A7F258C8155C54AF
|
|
84248BC0AC1F2F42A41CFFFA70B21B347DDC70E9
|
|
A427B264C1BD2712D1178912753BAC051A7A2F6C
|
|
A9ACA6F541555619159640D3EBC570CDCDCE0A0D
|
|
B05E577E002C510E7AB11B996A1CD8FE8FDADA0C
|
|
BD87CF5B66E36506F1D6774FD40C2C92A196E278
|
|
BE319672A87D0DD1F055AD1221B6FFD8C226A6E2
|
|
C7E919622D6D8EA2491ED392A0F8457E4483EAE9
|
|
CD07036416B3A344A34F4571CE6A1DF3CBB5783F
|
|
D91E6BB091551E773B3933BE5985F91711D6AC3B
|
|
E1C2B28E6A35AEADB508C60A9D09AB7B1041AFB8
|
|
E40F0D402FDCBA6DD7467C1366D040B02A44628C
|
|
E5A2204F085C07250DA07D71CB4E48769328D7DC
|
|
KillDisk-components SHA-1:
|
|
16F44FAC7E8BC94ECCD7AD9692E6665EF540EEC4
|
|
8AD6F88C5813C2B4CD7ABAB1D6C056D95D6AC569
|
|
6D6BA221DA5B1AE1E910BBEAA07BD44AFF26A7C0
|
|
F3E41EB94C4D72A98CD743BBB02D248F510AD925
|
|
VBS/Agent.AD trojan SHA-1:
|
|
72D0B326410E1D0705281FDE83CB7C33C67BC8CA
|
|
Win32/SSHBearDoor.A trojan SHA-1:
|
|
166D71C63D0EB609C4F77499112965DB7D9A51BB
|