Rectifyq

2018-05-01 Cobalt Their Evolution And Joint Operations

3 min read

📃Title: Cobalt: Their Evolution And Joint Operations
📅Date: 2018-05-01
🔗References:

🔖Rectifyq Taxonomies:

🔖MISP Galaxies:

  • producer Group-IB
  • target-information=“Armenia”
  • target-information=“Belarus”
  • target-information=“Bulgaria”
  • target-information=“Estonia”
  • target-information=“Georgia”
  • target-information=“Kyrgyzstan”
  • target-information=“Malaysia”
  • target-information=“Moldova”
  • target-information=“Netherlands”
  • target-information=“Poland”
  • target-information=“Romania”
  • target-information=“Russia”
  • target-information=“Spain”
  • target-information=“Taiwan”
  • target-information=“United Kingdom”
  • threat-actor Cobalt
  • malpedia=“Carbanak”
  • mitre-attack-pattern=[]

MISP event uuid: 95577f81-7f15-402e-894a-bcb769c839e3

Indicator of Compromise (IoCs)

type,value,comment
md5, 23543750e343c70f6b2d0f1d63893675, 'No sample in VT\r\nLast check:06/05/2025'
md5, 2d53c67eb0f16024c0843158149e9e5f, 'No sample in VT\r\nLast check:06/05/2025'
md5, 35e0449cbe9fbe43e95b920c246828b2, 'No sample in VT\r\nLast check:06/05/2025'
md5, 4ad39b50b9716c85a2c9377bf2fb1ca1, 'No sample in VT\r\nLast check:06/05/2025'
md5, 5a34aacbbfccd307d0394d0770ab6742, 'No sample in VT\r\nLast check:06/05/2025'
md5, 5ab6c208607f6f92697015d4f84d6b69, 'No sample in VT\r\nLast check:06/05/2025'
md5, 5b9677bebe2b4392cc58f5836fe96a74, 'No sample in VT\r\nLast check:06/05/2025'
md5, 60c61a79cd1b04936bfbab75e9332107, 'No sample in VT\r\nLast check:06/05/2025'
md5, 670a1312ad4f1ac077d285bbc46e242c, 'No sample in VT\r\nLast check:06/05/2025'
md5, 70e022cc5cd7f867a36d7e4932b637f6, 'No sample in VT\r\nLast check:06/05/2025'
md5, 731654ed318db772b50fc055a498f472, 'No sample in VT\r\nLast check:06/05/2025'
md5, 83dee40f12f67634c5da640f6d6f2efb, 'No sample in VT\r\nLast check:06/05/2025'
md5, 9075432f928a166bff386a0598e15618, 'No sample in VT\r\nLast check:06/05/2025'
md5, a57e0d0ec7ae26ffd9c1557be6ae0864, 'No sample in VT\r\nLast check:06/05/2025'
md5, ac9ed9c15244888d0635b698d1ed87c3, 'No sample in VT\r\nLast check:06/05/2025'
md5, b1e2d42db32952026df6d5d7cc7ed9e1, 'No sample in VT\r\nLast check:06/05/2025'
md5, b4a2799e4e50df6813e5fb1ab7d4b094, 'No sample in VT\r\nLast check:06/05/2025'
md5, b9a7c0706087a0fecbd9b6f1002a2b96, 'No sample in VT\r\nLast check:06/05/2025'
md5, c6ac59164b4c637dba6436e2a30144b0, 'No sample in VT\r\nLast check:06/05/2025'
md5, c91658349005a2f1c92a20132de38486, 'No sample in VT\r\nLast check:06/05/2025'
md5, cafab9cc40ad0bd1cbec2164e17c8216, 'No sample in VT\r\nLast check:06/05/2025'
md5, d152c9df5fe1e5540b003eae557cf320, 'No sample in VT\r\nLast check:06/05/2025'
md5, d529218495f0318b99e60477368bb55e, 'No sample in VT\r\nLast check:06/05/2025'
md5, db0d8569bc52e259bd327b10d0317174, 'No sample in VT\r\nLast check:06/05/2025'
md5, dd8664286d6ec3f6f90a3b80af095479, 'No sample in VT\r\nLast check:06/05/2025'
md5, e5fcc477cd5176d4c6655c57b7a0274e, 'No sample in VT\r\nLast check:06/05/2025'
md5, eb162cc34efae1cb621cc7157ef36514, 'No sample in VT\r\nLast check:06/05/2025'
md5, f2b1d948af17f0006985b9eaee48d490, 'No sample in VT\r\nLast check:06/05/2025'
md5, f5aea645966319c96d4dbcadce2a10e0, 'No sample in VT\r\nLast check:06/05/2025'
sha1, 1989fee716dab57aee2d7262309976edcfb4fa85, 'No sample in VT\r\nLast check:06/05/2025'
sha1, 1acc9fa452ca967c7339d483fa3c2f07b30f4f1e, 'No sample in VT\r\nLast check:06/05/2025'
sha1, 4c230bb70b1949067abb8643f2c4e8b015830be9, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 106fcdf4d95957a156ae311e3d032b237d97385807949629aedd018429d4d155, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 1a31f9c5271e128b27e0f360041fef4905309318c9a9c21ff0224f2bd9ebea9f, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 20711584cec6887d76f20519a73353c13e40a71c816b27ab132d1639c00fbc68, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 232b7f918079d393d6f0f0f89018d773f5197bb22bbbda06f0e7594c6b53123c, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 2e75d78a47c377c6ab720276ba52f919ffe4bbb88b9b48508851738f0992e816, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 363881c87ab0795c20f2f171acac1a5325673a48dd9b391a81d9574e470143e5, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 387dcbb30689bd778631249016ea5c0f10c87245d6229d77af1d21e5db1f8018, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 405d1f1d3cc198fda1e6d7fbf848efcfa08eb67848c0812bb403d6f3bccfd1de, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 484c9c1dc40308988371fec737a9eff9d3c4334705c2b8a97e0697324164c199, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 5595a6b04510e99d5b0c357d76b3be0ccc506aaf91f9a08a72e0b92ac6d3d952, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 5f0d7423d889eb9dce5e79e5bb8202aea335f255bd88e4eabf21bff8890bbc90, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 60982ee489398897b0edeb78d1cf69ddb872ba8ab386438d65f78a60a73aff32, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 71c7cbfc231aab4570970ff833ce8e83511d6b925de29721ca3171381631bef1, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 9b39bb02989367497016fe58fc39b0564a947a8a298b4a58e36fa983944a33c7, 'No sample in VT\r\nLast check:06/05/2025'
sha256, a345d922b87246cfaef749514f9b36d1c8bb152a8afddd26ab2566f9bea071b1, 'No sample in VT\r\nLast check:06/05/2025'
sha256, b6d0b1030cb71c27f91dc9c645ad2c5aaf81bdf47f8713a5fa5aa0f2f0680f29, 'No sample in VT\r\nLast check:06/05/2025'
sha256, c67de95eaf817dc46acce9a0948fa2ba91222193999f28cbde9f1b477f665e52, 'No sample in VT\r\nLast check:06/05/2025'
sha256, d3844ac08424b50c3624718665d387d0c24888685744f8efce217197f597483e, 'No sample in VT\r\nLast check:06/05/2025'
sha256, eac418381ea047601fae9c92412b5df49ed6aac3edd74fb5e2eb6f09a1cc3861, 'No sample in VT\r\nLast check:06/05/2025'
sha256, fa9758814e0994b972afe305a50b7326193a3d15f603063d0b6728dccfbd8dbf, 'No sample in VT\r\nLast check:06/05/2025'

Full IOCs available in Rectifyq's MISP```

Graph View