2018-05-01 Cobalt Their Evolution And Joint Operations

📃Title: Cobalt: Their Evolution And Joint Operations
📅Date: 2018-05-01
🔗References:

• https://www.group-ib.com/resources/research-hub/cobalt-evolution/
• https://go.group-ib.com/report-cobalt-evolution-en

🔖Rectifyq Taxonomies:

• relevancy: 🔴 Highly Relevant
• category: ⚔Threat
• sub-category: TA-profile
• target: targeted
• MY-relevancy: relevant

🔖MISP Galaxies:

• producer= Group-IB
• target-information=“Armenia”
• target-information=“Belarus”
• target-information=“Bulgaria”
• target-information=“Estonia”
• target-information=“Georgia”
• target-information=“Kyrgyzstan”
• target-information=“Malaysia”
• target-information=“Moldova”
• target-information=“Netherlands”
• target-information=“Poland”
• target-information=“Romania”
• target-information=“Russia”
• target-information=“Spain”
• target-information=“Taiwan”
• target-information=“United Kingdom”
• threat-actor= Cobalt
• malpedia=“Carbanak”
• mitre-attack-pattern=[]

MISP event uuid: 95577f81-7f15-402e-894a-bcb769c839e3

Indicator of Compromise (IoCs)

type,value,comment
md5, 01a0e6e1ac4ca9ae8a8d314f3812d63a, ''
md5, 02dcb557d377470df02558f5914f2db9, ''
md5, 032d63ec4ccfef5648a414bead337b72, ''
md5, 036faf1f7e39e44c0db25b9149b45786, ''
md5, 04267fb0dbd0728a882298e120f70860, ''
md5, 0c34ae326a8fd68d4a67ea3484b7cf81, ''
md5, 0d21832c171e817e947837bbfb67380e, ''
md5, 0d753e128c3f5bd088dd3fd7813a74b9, ''
md5, 0e7952fb5990c4782a939e2e61615f6f, ''
md5, 1593ac2ad08666e5bd6294174ea9121d, ''
md5, 16ea8bb383bb33c5df951794b6607456, ''
md5, 178117c3d3829dbfb43008b4af44a5af, ''
md5, 17c25c8a7c141195ee887de905f33d7b, ''
md5, 1b394efc804f6b08afa86db0924d75d4, ''
md5, 1d07edbd16cbe529500c37245e613a47, ''
md5, 1df85c34e9ff432de52f939d45916abe, ''
md5, 22aef81ad5073421298846ee22996b73, ''
md5, 240e12d258ee70909c3151c249647224, ''
md5, 276dd9b30cbf8553f4aebf5558158196, ''
md5, 2affe3974213f831629fb1ffbb252252, ''
md5, 2bc838a1b62b94f710e2eb0b36b0c57e, ''
md5, 2d65e9263942e2a96811cc971fbe01d9, ''
md5, 2db35b260eb5c26fdfabd667648d55e2, ''
md5, 2e0cc6890fbf7a469d6c0ae70b5859e7, ''
md5, 2fd718f06b65d3c16659845ac1b5e36f, ''
md5, 334870fc3c0f0dd2a8fa828393ddaccd, ''
md5, 336452149b04e9c4c64b8c5015e64ccd, ''
md5, 33700535591774417e3282f7b40ae8ad, ''
md5, 33a0fdfe54090f31e5acc20bd0666d6d, ''
md5, 33edc70615de35b71e54f046d7fa3038, ''
md5, 3533c61681c33d5c17d8ff7a769e1592, ''
md5, 37aded8f7ff56d6f170845e7e9cacbf3, ''
md5, 37d1f4b225ea7008a1a5c0641d99a8a0, ''
md5, 3b2b116db9569f50c9e7a272c7530b18, ''
md5, 3ea9ef46e89f07920d87255aef9261ba, ''
md5, 417bbef21ca0b964aff5c8690b8307c9, ''
md5, 45b1809ac884da61954a1ec77a81c141, ''
md5, 4673ebad94126fc2404af32a32dd2d95, ''
md5, 470b4a700ed17cef328bc6017b7e01fe, ''
md5, 4b67a15c48c3db6f3ba89ea6bb8f2da2, ''
md5, 4c1e6fc86270f3ad5e33c1da50d27be8, ''
md5, 5387ce39a795cfe6477b91aad2a617df, ''
md5, 53c31c8f47f6b421867e94ee2582f4fe, ''
md5, 53c460bc660db253e06673ca3fcd9282, ''
md5, 555399c93b5f01fd9fad5f903da768d3, ''
md5, 56487b799755f50c6e56c41870d43624, ''
md5, 56a3a4c857939ac9bed4f2e0084fb037, ''
md5, 5a566b322605835a895e5408d2488e24, ''
md5, 5b3968b47eb16a1cb88525e3b565eab1, ''
md5, 5d11c7b17633332b787992ee617d3552, ''
md5, 5d139043028591159855ad589add1c41, ''
md5, 5f6efd501a5356d8f3c53b760b9eb616, ''
md5, 60ebd9c7e7a911922c5ec16ab8128061, ''
md5, 63f92615fbd133b98a02365ae5cfa232, ''
md5, 6469a3862115b768c7d8465f73e79355, ''
md5, 655e81c7758220e79d2f9066d853b642, ''
md5, 699ffb65463a6f62dc11207fe30cb2aa, ''
md5, 6abcb743a649f136a7af82c0dbccae0f, ''
md5, 6d355ffa06ae39fc8671cc8ac38f984e, ''
md5, 6dda24eac03876879f1404671646b79f, ''
md5, 70469e15f04b799930baec1d3d64cd54, ''
md5, 712e11e5217ef06847ea96a83e952566, ''
md5, 72ea2c440b522607eed37429a1675d8e, ''
md5, 73ad7e37ce7a97c3bb5f69a87fe9358c, ''
md5, 749cbcc0ec509ffcf8bffaa9874e4f14, ''
md5, 74b113e6fae947fe9ced001432d6f152, ''
md5, 74d5576a036f8a28ea423f053fcd89e2, ''
md5, 752fc2b1736b7b6e124ef8012c744c33, ''
md5, 77ece7a13d98ac81e5022f8239985f9b, ''
md5, 785ded9a20d7e63942e175a947d45f9f, ''
md5, 7c5e8302ac75588b16a88b158ab3b595, ''
md5, 7fa1af2adba39ef6efe0f870c057554d, ''
md5, 80623478382370476d0b3ddc7fe68a88, ''
md5, 820299c5bc8357743b222c11a3e50734, ''
md5, 84245bd582caf2bb26681fcd9d1fb09e, ''
md5, 85d074aa473f3ae94275f885f8a7d37e, ''
md5, 87325b2522f8a48b8e5f149dd5e8eea2, ''
md5, 87aa6f8b236f77ea6ba2960e339a2418, ''
md5, 87cd2fa87920d8f16eb10db54f9274c3, ''
md5, 87d595e68a7b871564d9c70b1a9066f5, ''
md5, 88b33fe677772431f7c37751c89dcb47, ''
md5, 89889adb22c63186eb8c72323f34b1fd, ''
md5, 8993f927beaf8daa02bb792c86c2b5e0, ''
md5, 89d910180aeaac1029c98d7ae4fe746c, ''
md5, 8c8a24a1f8014a171c96c80efab30fc2, ''
md5, 8c99d3520d8220d58c1990d962647a39, ''
md5, 95862a286c6f2c6205dc7d97ed12f753, ''
md5, 95a1a53b1f3309b07722a2fd5b9ad1b5, ''
md5, 966cc404a4f6bf6d77565004a952b3e3, ''
md5, 96b420f072cd135ed7cac2c6880c1727, ''
md5, 96babdcf4dbcae1c40e28443a0535dd2, ''
md5, 9713863011d0db13da1943931ff33b92, ''
md5, 996054b4ebf1a81661b6b450113257a2, ''
md5, 9a395e8aca699190e724ac03b70b2924, ''
md5, 9afa9e95a7dcd3defd357292d843af4b, ''
md5, 9b6892e8470cfbd605f7037f844dc191, ''
md5, 9cea189eb6935013603619e998150af9, ''
md5, 9d443e225e21f160014e79b62c5aea3d, ''
md5, 9eaaac2857ac71ce73c2554152042101, ''
md5, a7ed424cf7c78e31bfbd0915b841c6e2, ''
md5, a9160049a5e449440fad78482ed5d951, ''
md5, a99db3460ae1bddca50ebb49e7ff98c9, ''
md5, ab6800a0a5ce088f9c9655672a42a446, ''
md5, ae0e00e8bf6b9722d376cb84eaae2251, ''
md5, af75147e525ed8e52bf728466d66b9d0, ''
md5, aff47ad6ee85747ec3fe5fcbd8441cf7, ''
md5, b175140a52aca83833a8203ac81e7475, ''
md5, b182a813da9b6e24321997fb3fad1748, ''
md5, b32c8b937ef0f319765f8b63f2209af2, ''
md5, b4403222c7e0d02eee471c409d2f1a61, ''
md5, b4f4ce145147c24d5ab339e877c57f88, ''
md5, b57189a131e7cbc53853d3ab58e2de12, ''
md5, b5babfa5eddfa129862b02d125c9070c, ''
md5, b5bb3f04b6dcf61576e0436fab88a22b, ''
md5, b6f640a14cc416e366e9bf899481fd6a, ''
md5, b7dd435a9cc841f7bada2a064afb4d3c, ''
md5, bb6e7886bb38c10931152f9110a47a8f, ''
md5, bcc9ac70ab4048f60a2f6d658fbee123, ''
md5, bd07b04e008093a40f60e48b903c59cf, ''
md5, bfabbefb0acd397a164e8f7ec3e467e9, ''
md5, bfb9688ac2747017c7975921ffe77be9, ''
md5, c138d751db967c0c7461a503ff987162, ''
md5, c2c753f440314d1ec88c1569aa845ac2, ''
md5, c783cee95bdc2e973415366215d15998, ''
md5, c8239719f5d3d3c0cf3ea76ed626bbe8, ''
md5, c8bce60c90ce26b0e2b96770071c72d2, ''
md5, c9ed3c1c6944341e106c5506f8d75d91, ''
md5, cc70aaa5a8a792faeab8c873a4d73174, ''
md5, ce38e8d857794560fc8469c92ab16a66, ''
md5, d0f16357d10b5817c43554d5b6f540c8, ''
md5, d3d3494dc630694c20a21f1da327b551, ''
md5, d41c13c4a37eb358f6f314f6125343dc, ''
md5, d456a2719d1054bdbd0544a2ded6a354, ''
md5, d46df9eacfe7ff75e098942e541d0f18, ''
md5, d4ff8e87f66150e36e4f70c65f422524, ''
md5, d6ff1aa189524a993836507b8d23ec64, ''
md5, d906f35ffccf7f08afcc193a2804dc5a, ''
md5, db334fc7bd6d351aad6e93e87e837760, ''
md5, db4fc02e5f5a21e38e93d867cc70fe54, ''
md5, db6a8169f55a20838c0ca6f383c11e23, ''
md5, e167322a628bdec5348ee443ea9c9534, ''
md5, e249fc0578b0fbd00fc171a1b98cbc87, ''
md5, e38f081cf6628df63fe8f79cb6ed62fa, ''
md5, e4a6e9824a12d0d3ace6ace9b3b79fcc, ''
md5, e54c635381b677e4bd2715013e19526b, ''
md5, e5c58d2ef3b20c5370c73b70e273b9b0, ''
md5, e7aa5608c81ba4fcd8d166501b90fc06, ''
md5, ec4cca1d9117a662573aefd5284393db, ''
md5, ef72be586832af0528d3a9b3c5347722, ''
md5, f360d41a0b42b129f7f0c29f98381416, ''
md5, f3e52ac8b82cdc048f48bfd03868b072, ''
md5, f4f4eb32a90483a9a0fca214ffafb32c, ''
md5, f726cad84718bccfdc81c7f17700a4d1, ''
md5, f86ecc69caab5d627f9fe63f73b56936, ''
md5, fa04623cb547fa967f20f2630b750af0, ''
md5, fa7654d7e2be803dd7af72b3457c1934, ''
md5, fae3d240ad10fce0e4cec85aae446237, ''
md5, fbdb2469b83944061e4847bfc5b3a08b, ''
md5, fbf25b39a15a011d8648bf20895f496a, ''
md5, fe44c14403f36c6e451bda391a1d1ca7, ''
md5, 649ad824358a4b00d7e7b8126cdbb28f, ''
md5, 1417d6d7ceadb491bb9ab8cac6a3ce6f, ''
md5, fd34bc7a8c1e756bf54c38d94d7dd450, ''
md5, e34cf17871b7476a1cd064a3a7043224, ''
md5, 3dc3e45e3aee70ca220c936a097ac3a8, ''
md5, 5001ef2b836d4de7f281997260c1d5bd, ''
md5, 15137f602deea71ac2a167c6469673f3, ''
md5, c4505c6a6b148c3d7b5f4d756f49dbdf, ''
md5, 658b0502b53f718bd0611a638dfd5969, ''
md5, f53570abc569f300ff00f881c7ce77b8, ''
md5, 999fe28b2cbe5d99e47d11ed55761c9e, ''
md5, 6dee2e15028e65abdf674f7a3006883e, ''
md5, 0846b28b2b2e230a77bbfd663e41b418, ''
md5, 2e7e3390cc3d979aeca585c41825e74f, ''
md5, 01718b365b4724b777e9ae63fed0c610, ''
md5, 2b75a6137dc9210cbccfd1b63195262a, ''
md5, 3b03f52cc29b91fcfe71530b5807f1d3, ''
md5, a4f6b59524c3f519cef40bb11812283f, ''
md5, c14365374fc3331482f35b75178a1ad4, ''
md5, 5d4d3ba6823a07f070f5a42cbcc7a5c8, ''
md5, f8b6c00eedfefe64884eb0139245ef85, ''
md5, 0ba1024fd50f436fd34a449cc0f2e7dc, ''
md5, 244d8d2e948f908ef21f60389ea16837, ''
md5, b65a8e26ad3250b9300fc20846e820e1, ''
md5, 7edca868c6c52a9f7b24892dc361e444, ''
md5, 23543750e343c70f6b2d0f1d63893675, 'No sample in VT\r\nLast check:06/05/2025'
md5, 2d53c67eb0f16024c0843158149e9e5f, 'No sample in VT\r\nLast check:06/05/2025'
md5, 35e0449cbe9fbe43e95b920c246828b2, 'No sample in VT\r\nLast check:06/05/2025'
md5, 4ad39b50b9716c85a2c9377bf2fb1ca1, 'No sample in VT\r\nLast check:06/05/2025'
md5, 5a34aacbbfccd307d0394d0770ab6742, 'No sample in VT\r\nLast check:06/05/2025'
md5, 5ab6c208607f6f92697015d4f84d6b69, 'No sample in VT\r\nLast check:06/05/2025'
md5, 5b9677bebe2b4392cc58f5836fe96a74, 'No sample in VT\r\nLast check:06/05/2025'
md5, 60c61a79cd1b04936bfbab75e9332107, 'No sample in VT\r\nLast check:06/05/2025'
md5, 670a1312ad4f1ac077d285bbc46e242c, 'No sample in VT\r\nLast check:06/05/2025'
md5, 70e022cc5cd7f867a36d7e4932b637f6, 'No sample in VT\r\nLast check:06/05/2025'
md5, 731654ed318db772b50fc055a498f472, 'No sample in VT\r\nLast check:06/05/2025'
md5, 83dee40f12f67634c5da640f6d6f2efb, 'No sample in VT\r\nLast check:06/05/2025'
md5, 9075432f928a166bff386a0598e15618, 'No sample in VT\r\nLast check:06/05/2025'
md5, a57e0d0ec7ae26ffd9c1557be6ae0864, 'No sample in VT\r\nLast check:06/05/2025'
md5, ac9ed9c15244888d0635b698d1ed87c3, 'No sample in VT\r\nLast check:06/05/2025'
md5, b1e2d42db32952026df6d5d7cc7ed9e1, 'No sample in VT\r\nLast check:06/05/2025'
md5, b4a2799e4e50df6813e5fb1ab7d4b094, 'No sample in VT\r\nLast check:06/05/2025'
md5, b9a7c0706087a0fecbd9b6f1002a2b96, 'No sample in VT\r\nLast check:06/05/2025'
md5, c6ac59164b4c637dba6436e2a30144b0, 'No sample in VT\r\nLast check:06/05/2025'
md5, c91658349005a2f1c92a20132de38486, 'No sample in VT\r\nLast check:06/05/2025'
md5, cafab9cc40ad0bd1cbec2164e17c8216, 'No sample in VT\r\nLast check:06/05/2025'
md5, d152c9df5fe1e5540b003eae557cf320, 'No sample in VT\r\nLast check:06/05/2025'
md5, d529218495f0318b99e60477368bb55e, 'No sample in VT\r\nLast check:06/05/2025'
md5, db0d8569bc52e259bd327b10d0317174, 'No sample in VT\r\nLast check:06/05/2025'
md5, dd8664286d6ec3f6f90a3b80af095479, 'No sample in VT\r\nLast check:06/05/2025'
md5, e5fcc477cd5176d4c6655c57b7a0274e, 'No sample in VT\r\nLast check:06/05/2025'
md5, eb162cc34efae1cb621cc7157ef36514, 'No sample in VT\r\nLast check:06/05/2025'
md5, f2b1d948af17f0006985b9eaee48d490, 'No sample in VT\r\nLast check:06/05/2025'
md5, f5aea645966319c96d4dbcadce2a10e0, 'No sample in VT\r\nLast check:06/05/2025'
sha1, 1989fee716dab57aee2d7262309976edcfb4fa85, 'No sample in VT\r\nLast check:06/05/2025'
sha1, 1acc9fa452ca967c7339d483fa3c2f07b30f4f1e, 'No sample in VT\r\nLast check:06/05/2025'
sha1, 4c230bb70b1949067abb8643f2c4e8b015830be9, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 106fcdf4d95957a156ae311e3d032b237d97385807949629aedd018429d4d155, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 1a31f9c5271e128b27e0f360041fef4905309318c9a9c21ff0224f2bd9ebea9f, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 20711584cec6887d76f20519a73353c13e40a71c816b27ab132d1639c00fbc68, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 232b7f918079d393d6f0f0f89018d773f5197bb22bbbda06f0e7594c6b53123c, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 2e75d78a47c377c6ab720276ba52f919ffe4bbb88b9b48508851738f0992e816, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 363881c87ab0795c20f2f171acac1a5325673a48dd9b391a81d9574e470143e5, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 387dcbb30689bd778631249016ea5c0f10c87245d6229d77af1d21e5db1f8018, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 405d1f1d3cc198fda1e6d7fbf848efcfa08eb67848c0812bb403d6f3bccfd1de, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 484c9c1dc40308988371fec737a9eff9d3c4334705c2b8a97e0697324164c199, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 5595a6b04510e99d5b0c357d76b3be0ccc506aaf91f9a08a72e0b92ac6d3d952, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 5f0d7423d889eb9dce5e79e5bb8202aea335f255bd88e4eabf21bff8890bbc90, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 60982ee489398897b0edeb78d1cf69ddb872ba8ab386438d65f78a60a73aff32, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 71c7cbfc231aab4570970ff833ce8e83511d6b925de29721ca3171381631bef1, 'No sample in VT\r\nLast check:06/05/2025'
sha256, 9b39bb02989367497016fe58fc39b0564a947a8a298b4a58e36fa983944a33c7, 'No sample in VT\r\nLast check:06/05/2025'
sha256, a345d922b87246cfaef749514f9b36d1c8bb152a8afddd26ab2566f9bea071b1, 'No sample in VT\r\nLast check:06/05/2025'
sha256, b6d0b1030cb71c27f91dc9c645ad2c5aaf81bdf47f8713a5fa5aa0f2f0680f29, 'No sample in VT\r\nLast check:06/05/2025'
sha256, c67de95eaf817dc46acce9a0948fa2ba91222193999f28cbde9f1b477f665e52, 'No sample in VT\r\nLast check:06/05/2025'
sha256, d3844ac08424b50c3624718665d387d0c24888685744f8efce217197f597483e, 'No sample in VT\r\nLast check:06/05/2025'
sha256, eac418381ea047601fae9c92412b5df49ed6aac3edd74fb5e2eb6f09a1cc3861, 'No sample in VT\r\nLast check:06/05/2025'
sha256, fa9758814e0994b972afe305a50b7326193a3d15f603063d0b6728dccfbd8dbf, 'No sample in VT\r\nLast check:06/05/2025'

Full IOCs available in Rectifyq’s MISP