Nucleon Cyber — IOC Report
Tags
attack-pattern: Dll Search Order Hijacking - T1574.001 Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Software Packing - T1027.002 Software Packing - T1406.002 Vulnerabilities - T1588.006 Dll Search Order Hijacking - T1038 Software Packing - T1045
Show in Graph
Common Information
Type Value
UUID 5ae8e2d9-84ab-42b9-adce-857cc1ab172d
Fingerprint 45302183ceb2af83
Analysis status DONE
Considered CTI value 2
Text language
Published May 8, 2023, 6:07 a.m.
Added to db May 8, 2023, 8:18 a.m.
Last updated Nov. 16, 2024, 12:27 a.m.
Headline Nucleon Cyber — IOC Report
Title Nucleon Cyber — IOC Report
Detected Hints/Tags/Attributes 44/1/32
Source URLs
Redirection Url
Details Source https://medium.com/@cybercure/nucleon-cyber-ioc-report-15357b7dd4f8?source=rss------cybersecurity-5
Details Source https://medium.com/@cybercure/nucleon-cyber-ioc-report-15357b7dd4f8?source=rss------malware-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Details 171 ✔ Malware on Medium https://medium.com/feed/tag/malware 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
sky.hobuff.info
Details Domain 1 
hi.admini.website
Details Domain 268 
www.virustotal.com
Details Domain 55 
otx.alienvault.com
Details Domain 75 
tria.ge
Details Domain 2 
www.securin.io
Details File 263 
iexplore.exe
Details File 2 
c64.exe
Details File 3 
86.exe
Details md5 1 
feaa2ebb565f21f7214289788222ca39
Details md5 1 
a663664313ca8af3e0de40e032efecff
Details md5 1 
ab525fe37151d52966c9731bd333e598
Details md5 1 
8456c8dede98f1db930ae403bd2741a5
Details md5 1 
b9931bc2912b881363e293863038d7ac
Details md5 1 
95adff91ef879eca350a62a211fbfb14
Details sha1 1 
a6adf4e53933070471c1632a444df9cf395a7a5e
Details sha1 1 
849c0cd6525da21e5b970c1e523930a460fcdf77
Details sha1 1 
6bd55fb6bb7e53dc84c514e947ea90e8569e659e
Details sha1 1 
2a4538cee32e89423749c2f7d206077762d1118a
Details sha1 1 
661591ba24ddff1f51a04d8512513579d43231dd
Details sha1 1 
efb2571a9ed39f780546cdc4568fec905bb20c1d
Details IPv4 9 
224.0.0.252
Details Url 1 
http://hi.admini.website:8/iexplore.exe
Details Url 1 
http://hi.admini.website:8/c64.exe
Details Url 1 
http://hi.admini.website:8/86.exe
Details Url 1 
http://hi.admini.website
Details Url 1 
https://www.virustotal.com/gui/file/d71936e119c3cb3ab0d87e751ad6d141a
Details Url 1 
https://otx.alienvault.com/indicator/file/d71936e119c3cb3ab0d87e751ad6d1
Details Url 1 
https://tria.ge/230506-ll2dpagf62/behavioral1
Details Url 1 
https://tria.ge/230506-lj98taah9v/behavioral1
Details Url 1 
https://tria.ge/230506-lf8wksah81/behavioral1
Details Url 1 
https://www.securin.io/indexsinas-smb-worm-exploits-eternalblue-vulnerabilities