IoC Extractor

This IoC extractor identifies Indicators of Compromise (IoCs) by matching patterns, without analyzing the context of the surrounding text. Manual Review and Validation of the extracted IoCs are essential before any action is used.

Kazakhstan-associated YoroTrooper disguises origin of attacks as Azerbaijan

DATE : 2023-10-19T07:00:00
SOURCE : talosintelligence.com

FILE_HASH_SHA1:
75676763663A2F2F31302E3130302E3230302E32

FILE_HASH_SHA256:
8131bd594aff4f4e233ac802799df3422f423dc28e96646a09a2656563c4ad7c
a3b1c3faa287f6ba2f307af954bb2503b787ae2cd59ec65e0bdd7a0595ea8c7e
Ed8c04a3e2d95d5ad8e2327a56d221715f06ed84eb9dc44ff86acff4076629d7
9b81c5811ef3742cd4f45b6c3ba1ace70a0ce661acc42d974beaeddf307dd53d
B6a5d6696cbb1690f75b0d9a42df8cefd444cfd3749be474535948a70ff2efd2
F55b41ca475f411af10eaf082754c6e8b7a648da4fa72c23cbfea9fa13a91d88
E0c7479e36b20cd7c3ca85966968b258b1148eb645a544230062ec5dff563258
ab6a8718dffbe48fd8b3a74f4bcb241cde281acf9e378b0c2370a040e4d827da
a5d8924f7f285f907e7e394635f31564a371dd58fad8fc621bacd5a55ca5929b
E95e64e7ba4ef18df0282df15fc97cc76ba57ea250a0df51469337f561cc67d3
832d58d9e067730a5705c8c307fd51c044d9697911043be9564593e05216e82a
Da75326cfebcca12c01e4a51ef77547465e03316c5f6fbce901ddcfe6425b753
1e350b316cbc42917f10f6f12fa2a0b8ed2fa6b0159c36141bce18edb6ea7aa0
57d0336c0dbaf455229d2689bf82f9678eb519e017d40ba60a6d6b90f87321f8
30a969fa0492479b1c6ef6d23f8fcccf3d7af35b235d74cab2c0c2fc8c212ad4
5a6b089b1d2dd66948f24ed2d9464ce61942c19e98922dd77d36427f6cded634
a25db1457cf6b52be481929755dd9699ed8d009aa30295b2bf54710cb07a2f22
56fc680799999e38ce84c80e27788839f35ee817816de15b90aa39332fcc5aee
37c369f9a9cac898af2668b1287dea34c753119071a1c447b0bfecd171709340
93829ee93688a31f90572316ecb21702eab04886c8899c0a59deda3b2f96c4be
0a9908d8c4de050149883ca17625bbe97830ba61c3fe6b0ef704c65361027add
1828e2df0ad76ea503af7206447e40482669bb25624a60b0f77743cd70f819f6
941be28004afc2c7c8248a86b5857a35ab303beb33c704640852741b925558a1
8921c20539fc019a9127285ca43b35610f8ecb0151872cdd50acdaa12c23722d
b4eac90e866f5ad8af37b43f5e9459e59ee1e7e2cbb284703c0ef7b1a13ee723

Domain:
alfachange.com
mail.antikor.gov.kz.openingfile.net
tuta.io
mail.mincom.gov-az.site
snort.org