top of page
Threat Roundup for August 20 to August 27
C45-2021-08-28-9
Indicators of Compromise (IOC) List
Indicator of Compromise (IOC) | Date Published | IOC Type |
|---|---|---|
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\AUTHROOT\CERTIFICATES\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0
Value Name | 28/08/2021 | Win_Registry |
7f23c9143233ebdadb67225b16efb46d9dbcb359dbb495deeaad22cd98f55315 | 28/08/2021 | SHA-256 |
HKU\.DEFAULT\CONTROL PANEL\BUSES
Value Name | 28/08/2021 | Win_Registry |
HKCR\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\SHELL\\1\0\0\0\0
Value Name | 28/08/2021 | Win_Registry |
2d580f61c4041b4bf86019246703002a61f5b6e7471b83a19d0d2bea9d509a7d | 28/08/2021 | SHA-256 |
30d369bfb9809db7548387e6999e753026055dc0abfa37dae13e19a8cc9de592 | 28/08/2021 | SHA-256 |
18c1f6929f8bd77e42e929874f0a6a99e2971eeb359ef8322ea2be7fa404a471 | 28/08/2021 | SHA-256 |
0795dc3c5c11184d86f07da6c903de40dcffb9dcbdafcc9a92203b2f22da532c | 28/08/2021 | SHA-256 |
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN
Value Name | 28/08/2021 | Win_Registry |
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\STARTPAGE
Value Name | 28/08/2021 | Win_Registry |
HKCR\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\SHELL\\1\0\0\0\0\1\0\0\0
Value Name | 28/08/2021 | Win_Registry |
HKCR\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\SHELL\\1\0
Value Name | 28/08/2021 | Win_Registry |
HKCR\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\SHELL\\1\0\0\0\0\1\0
Value Name | 28/08/2021 | Win_Registry |
42b0fec30bdcec1eabb1953baa047aa5cab94258f912562469602a8f9a5c8f61 | 28/08/2021 | SHA-256 |
819eb71e2c8a96ada5832365f6bbc7bfa009606e2ef9572d4d6ee14d175cb074 | 28/08/2021 | SHA-256 |
62cd02027e885f469501b1c4d9bf71b2aa2f62416db74da5ffa8a5507f87bca8 | 28/08/2021 | SHA-256 |
07b48745f8519a712f3f7898dedced56686b17e143db6ba2d09a4bfbe4e41138 | 28/08/2021 | SHA-256 |
5de7586c60f86460d1239fb8927d7ae2a4837059e50e0282a8674a735cc58c99 | 28/08/2021 | SHA-256 |
HKCR\IRC
17
HKCR\IRC\SHELL
17
HKCR\IRC\SHELL\OPEN
17
HKCR\IRC\SHELL\OPEN\COMMAND
17
HKCU\.DEFAULTSOFTWAREMEGALITH SOFTWAREVISUAL IRC 96 | 28/08/2021 | Win_Registry |
0e0ca75d378940153d90aa5854589382ec881f8fe15dde7854c354e20656acad | 28/08/2021 | SHA-256 |
0dcc1b7a2b2240f49dc3fc7165d7c1c2e3cb514f135a19e3b850505ea5f5a7a3 | 28/08/2021 | SHA-256 |
49ff6d71407d9f75df26b9e9d9428e3b966a735643a90a9d5e00cf79a7481645 | 28/08/2021 | SHA-256 |
HKU\.DEFAULT\CONTROL PANEL\BUSES
102
HKLM\SYSTEM\CONTROLSET001\SERVICES\random | 28/08/2021 | Win_Registry |
CVE-2020-1472 | 28/08/2021 | CVE |
c0d6548915a0b7ad23fd30a65cc38dc31fd293168d1033780d6d7c98dd5bd059 | 28/08/2021 | SHA-256 |
023fd0e5de906d95a296fefa581b3ff71f6537a166804bbd9afb54ae9db26368 | 28/08/2021 | SHA-256 |
7106ec4c7194a383e07045cb7b0f4724f80de8986d5620dc232121914163f9b1 | 28/08/2021 | SHA-256 |
9922efd298df2f49a6136f00593b37bf555be45d1deaac0c7d0bda06b4cf441b | 28/08/2021 | SHA-256 |
58a747907810378905512f50899cc82f1a1a97769b3727a8a4ec59df5e069dcd | 28/08/2021 | SHA-256 |
f187a8c00b1862a419b0d12c3dc7835179138f11411e3232546fde538eb13bc3 | 28/08/2021 | SHA-256 |
823a0d8e9836ecc03299718c4b64b358c6e2a663a639149e0bfe434eaad0997d | 28/08/2021 | SHA-256 |
40b34c9721e0e3f70d7a39e465422be247ed08852c8e6494338d2c41b93d80df | 28/08/2021 | SHA-256 |
0f28c481ec61071133e772a0d2b220b019f6b8eaf6a8ffaf42f844944be08641 | 28/08/2021 | SHA-256 |
0e0c4fbd7ec28dc4eaa3fb5dc7be58dfef1bf6aec4b8e1c935b1374f1d15dc36 | 28/08/2021 | SHA-256 |
43cf21293b1aab37697807596dd980207f8ff225e84801d7da150356964f196d | 28/08/2021 | SHA-256 |
79f75fe187cd7a15bc40f49ade0323807565dfc0310cd3416aeebf4ad16e7550 | 28/08/2021 | SHA-256 |
HKCU\SOFTWARE\REMCOS-8CPBWM
Value Name | 28/08/2021 | Win_Registry |
254ec9a3f1b8665c0301d195dd4b6eebf344c0b06068ee36b26280e93196dbb6 | 28/08/2021 | SHA-256 |
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\MYCOMPUTER\UNDERMINE
Value Name | 28/08/2021 | Win_Registry |
877e30aa0d65cf476e2322cae03df3c27c9e5d4d01c6c1be10da2f9c3024496f | 28/08/2021 | SHA-256 |
7aed620d7301999a294134abf408c647e2d279cdeac85e4fabe5cc2c5fa53397 | 28/08/2021 | SHA-256 |
HKCR\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\SHELL\\1
Value Name | 28/08/2021 | Win_Registry |
257f32161fb056bf88d761bc99858c722315f6696a162e2376681e730fc6fdb7 | 28/08/2021 | SHA-256 |
598fdeebd4270fa442ab8ca6fd7bf2a742d7dbbe2f7df9fe4a8387e1028b51ee | 28/08/2021 | SHA-256 |
223bc06d774c8be5a6217d95d27951f0c63796569162da32a6d548fd40714a00 | 28/08/2021 | SHA-256 |
6f8f2ac7c3b0403d1907a35c5517a4e86c842dd94c46b75a704c41423dcf8921 | 28/08/2021 | SHA-256 |
HKCU\SOFTWARE\KAZAA
17
HKCU\SOFTWARE\UNDERMINE
17
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\MYCOMPUTER
17
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\MYCOMPUTER\UNDERMINE
17
HKCU\SOFTWARE\KAZAA\TRANSFER
17
HKCU\SOFTWARE\UNDERMINE
Value Name | 28/08/2021 | Win_Registry |
34bc5c2f6b12f24d52ad663ccaae81b011656c7f019fe7c3f79ad56f314424d9 | 28/08/2021 | SHA-256 |
bfcf53333beda38c20dc664a7a8dc069387670f2eff528e5700d557a3d149858 | 28/08/2021 | SHA-256 |
7b7d409532f6c627de1941a0d4dd8b9cd0734e4a039582be4d04d67389b99e99 | 28/08/2021 | SHA-256 |
bottom of page