top of page
Cisco Talos Intelligence Group - Comprehensive Threat Intelligence ...
C45-2021-03-27-9
Indicators of Compromise (IOC) List
Indicator of Compromise (IOC) | Date Published | IOC Type |
|---|---|---|
HKLM\SYSTEM\CONTROLSET001\SERVICES\WBENGINE
Value Name | 27/03/2021 | Win_Registry |
HKLM\SYSTEM\CONTROLSET001\SERVICES\MOZILLAMAINTENANCE
Value Name | 27/03/2021 | Win_Registry |
HKLM\SOFTWARE\MICROSOFT\WINDOWS DEFENDER\EXCLUSIONS\PATHS
Value Name | 27/03/2021 | Win_Registry |
HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\WINDOWSUPDATE
Value Name | 27/03/2021 | Win_Registry |
HKLM\SYSTEM\CONTROLSET001\SERVICES\WSCSVC
Value Name | 27/03/2021 | Win_Registry |
af8588b958f39fb1bec1a1cb80960e31fcdc6915cf573541c2a7106b9298be33 | 27/03/2021 | SHA-256 |
308f9e5583646a897d372a146c45ea358c29f9e4857c688f23da9ec66ec1f68f | 27/03/2021 | SHA-256 |
HKLM\SYSTEM\CONTROLSET001\SERVICES\WMIAPSRV
Value Name | 27/03/2021 | Win_Registry |
a2c64580e6e0d82a2249ad09667d09ca31edebe6b8f228377f7f6bb48b728737 | 27/03/2021 | SHA-256 |
HKLM\SYSTEM\CONTROLSET001\SERVICES\MPSSVC
Value Name | 27/03/2021 | Win_Registry |
HKLM\SYSTEM\CONTROLSET001\SERVICES\OSE
Value Name | 27/03/2021 | Win_Registry |
HKLM\SYSTEM\CONTROLSET001\SERVICES\VSS
Value Name | 27/03/2021 | Win_Registry |
HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\WINDOWSUPDATE
15
HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\WINDOWSUPDATE\OSUPGRADE
15
HKCU\SOFTWARE\XVYG
15
HKLM\SOFTWARE\WOW6432NODE\XVYG
15
HKCR\C3B616
15
HKCR\C3B616\SHELL
15
HKCR\C3B616\SHELL\OPEN
15
HKCR\C3B616\SHELL\OPEN\COMMAND
15
HKCR\.8CA9D79
15
HKLM\SOFTWARE\WOW6432NODE\XVYG
Value Name | 27/03/2021 | Win_Registry |
HKCR\.8CA9D79
15
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN
Value Name | 27/03/2021 | Win_Registry |
HKLM\SYSTEM\CONTROLSET001\SERVICES\MSISERVER
Value Name | 27/03/2021 | Win_Registry |
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELLCOMPATIBILITY\APPLICATIONS
Value Name | 27/03/2021 | Win_Registry |
HKLM\SYSTEM\CONTROLSET001\SERVICES\VDS
Value Name | 27/03/2021 | Win_Registry |
HKLM\SOFTWARE\WOW6432NODE\1B21DAD32ACEFC37
Value Name | 27/03/2021 | Win_Registry |
HKLM\SOFTWARE\WOW6432NODE\XVYG
Value Name | 27/03/2021 | Win_Registry |
HKLM\SYSTEM\CONTROLSET001\CONTROL\SAFEBOOT\MINIMAL\PEVSYSTEMSTART
16
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM
Value Name | 27/03/2021 | Win_Registry |
18b655de153caf6def91628b68606333c91efad5f5827b3ec32bfceff662a36e | 27/03/2021 | SHA-256 |
043c3ac07aed1995f1ff8bca35e470893ad9b04c1d2cb5cab908a197e282b6dc | 27/03/2021 | SHA-256 |
aaa425c7836465068597d9124769da735f0505b4d394d219970dd3d8366a066a | 27/03/2021 | SHA-256 |
b0de96ea181d9c49d72660b7d6b824c1f28ca3cddeb6b525fd281ecfd3950442 | 27/03/2021 | SHA-256 |
HKLM\SYSTEM\CONTROLSET001\SERVICES\UI0DETECT
Value Name | 27/03/2021 | Win_Registry |
HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\WINDOWSUPDATE\OSUPGRADE
Value Name | 27/03/2021 | Win_Registry |
HKLM\SOFTWARE\WOW6432NODE\L7ZCKDV
Value Name | 27/03/2021 | Win_Registry |
HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS DEFENDER
28
HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS DEFENDER\EXCLUSIONS
28
HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS DEFENDER\EXCLUSIONS\PATHS
28
HKLM\SOFTWARE\MICROSOFT\WINDOWS DEFENDER\EXCLUSIONS\PATHS
Value Name | 27/03/2021 | Win_Registry |
HKU\.DEFAULT\CONTROL PANEL\BUSES
Value Name | 27/03/2021 | Win_Registry |
HKLM\SYSTEM\CONTROLSET001\SERVICES\IEETWCOLLECTORSERVICE
Value Name | 27/03/2021 | Win_Registry |
85629695382446ef6ec2b7874207429b737680149de0dfffcfc15242614f6086 | 27/03/2021 | SHA-256 |
HKLM\SYSTEM\CONTROLSET001\SERVICES\random | 27/03/2021 | Win_Registry |
5854538f45fb07597f4a98f0b4b78f4a994b3caec3d087e505f32132a9acc6f0 | 27/03/2021 | SHA-256 |
HKLM\SOFTWARE\WOW6432NODE\WNECRBHM3A
Value Name | 27/03/2021 | Win_Registry |
43f9d6d4c3ab089052a39c9f26360c533390f1de5e297cac1d22db4ddbe885f9 | 27/03/2021 | SHA-256 |
HKLM\SYSTEM\CONTROLSET001\SERVICES\BFE
Value Name | 27/03/2021 | Win_Registry |
HKU\.DEFAULT\CONTROL PANEL\BUSES
16
HKLM\SYSTEM\CONTROLSET001\SERVICES\random | 27/03/2021 | Win_Registry |
7acf142aa1f91433902c6e14310d59fa67d3b1db657afac1f9a62af98c5b1b7d | 27/03/2021 | SHA-256 |
HKLM\SYSTEM\CONTROLSET001\SERVICES\COMSYSAPP
Value Name | 27/03/2021 | Win_Registry |
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\AUTHROOT\CERTIFICATES\F9B5B632455F9CBEEC575F80DCE96E2CC7B278B7
Value Name | 27/03/2021 | Win_Registry |
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\ACTION CENTER\CHECKS | 27/03/2021 | Win_Registry |
07f42e9fbd8d371cd8c876635578b4ca2d998c43653faff79b5196835118f3e0 | 27/03/2021 | SHA-256 |
3ef957f17fad746719bf49a9242d25832b5a6fcd05267d800c3d1cc7d238fb19 | 27/03/2021 | SHA-256 |
HKLM\SYSTEM\CONTROLSET001\SERVICES\ | 27/03/2021 | Win_Registry |
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN
Value Name | 27/03/2021 | Win_Registry |
ba0d4092f198ef4a8fb17617550e7ed6c875c81aaed9e8194b2d1db557632bf2 | 27/03/2021 | SHA-256 |
HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS DEFENDER\EXCLUSIONS\PATHS
Value Name | 27/03/2021 | Win_Registry |
HKCU\SOFTWARE\XVYG
Value Name | 27/03/2021 | Win_Registry |
42cb05cdb7e2c931d7d86a55837ee6ca3eca52a99bf0c6b322605fbddbacdd12 | 27/03/2021 | SHA-256 |
9110658caa6bb771c0f983f9351adb1258c6e1c976401c40acb674427dfe4179 | 27/03/2021 | SHA-256 |
bottom of page