IoC Extractor

This IoC extractor identifies Indicators of Compromise (IoCs) by matching patterns, without analyzing the context of the surrounding text. Manual Review and Validation of the extracted IoCs are essential before any action is used.

BlackLotus UEFI bootkit: Myth confirmed

DATE : 2023-02-23T07:00:00
SOURCE : welivesecurity.com

CVE:
cve-2022-21894

FILE_HASH_MD5:
570B5D22B723B4A442CC6EEEBC2580E8

FILE_HASH_SHA1:
05846D5B1D37EE2D716140DE4F4F984CF1E631D1
A5A530A91100ED5F07A5D74698B15C646DD44E16
D82539BFC2CC7CB504BE74AC74DF696B13DB486A
16B12CEA54360AA42E1120E82C1E9BC0371CB635
DAE7E7C4EEC2AC0DC7963C44A5A4F47D930C5508
45701A83DEC1DC71A48268C9D6D205F31D9E7FFB
2CE056AE323B0380B0E87225EA0AE087A33CD316
5A0074203ABD5DEB464BA0A79E14B7541A033216
5DC9CBD75ABD830E83641A0265BFFDDD2F602815
97AEC21042DF47D39AC212761729C6BE484D064D
ADCEEC18FF009BED635D168E0B116E72096F18D2
DBC064F757C69EC43517EFF496146B43CBA949D1
06AF3016ACCDB3DFE1C23657BF1BF91C13BAA757
0C0E78BF97116E781DDE0E00A1CD0C29E68D623D
6D8CEE28DA8BCF25A4D232FEB0810452ACADA11D
74FF58FCE8F19083D16DF0109DC91D78C94342FA
ACC74217CBE3F2E727A826B34BDE482DCAE15BE6
111C4998F3264617A7A9D9BF662D4B1577445B20
17FA047C1F979B180644906FE9265F21AF5B0509
1F3799FED3CF43254FE30DCDFDB8DC02D82E662B
4B882748FAF2C6C360884C6812DD5BCBCE75EBFF
91F832F46E4C38ECC9335460D46F6F71352CFFED
994DC79255AEB662A672A1814280DE73D405617A
FFF4F28287677CAABC60C8AB36786C370226588D
71559C3E2F3950D4EE016F24CA54DA17D28B9D82
D6D3F3151B188A9DA62DEB95EA1D1ABEFF257914
547FAA2D64B85BF883955B723B07635C0A09326B
D1BBAA3D408E944C70B3815471EED7FA9AEE6425
0E6DD7110C38464ECAA55EE4E2FA303ADA0EDEFB
D6BB89D8734B3E49725362DAE9A868AE681E8BD6
164BB587109CFB20824303AD1609A65ABB36C3E9
C8E6BF8B6FDA161BBFA5470BCC262B1BDC92A359

Domain:
myrepositoryx.com
erdjknfweklsgwfmewfgref.com
harrysucksdick.com
heikickgn.com
egscorp.net
heikickgn.comfrassirishiproc.com
frassirishiproc.com
msftncsi.com

Url:
https://xrepositoryx.name/network/API/hpb_gate.ph
https://myrepositoryx.com/network/API/hpb_gate.ph
https://erdjknfweklsgwfmewfgref.com/API/hpb_gate.ph
https://harrysucksdick.com/API/hpb_gate.ph
https://heikickgn.com/API/hpb_gate.phphttps://frassirishiproc.com/API/hpb_gate.ph
https://egscorp.net/API/hpb_gate.ph