52c66274994172447b21054744cc5b69MD5 hash
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 3 years ago
What the reports say
2 reports, newest first · the exact sentence from each-
Armés et dangereux : une soif d’argent inextinguible L’APT OPERA1ER en Afrique“Skowron remarqua que l’attaquant utilisait une PublicKey spécifique sur ses serveurs Cobalt Strike : “PublicKey_MD5”: “52c66274994172447b21054744cc5b69”.”
-
Financially motivated, dangerously activated: OPERA1ER APT in Africa““PublicKey_MD5″:”52c66274994172447b21054744cc5b69”.”
Indicators reported together
named in the same reports- banqueislamik.ddrive[.]onlinein 2 reports
- files.ddrive[.]onlinein 2 reports
- 20.91.192[.]253in 2 reports
- 188.126.90[.]14in 2 reports
- 178.73.192[.]17in 2 reports
- 46.246.84[.]17in 2 reports
- 46.246.84[.]21in 2 reports
- 43.205.33[.]202in 2 reports
- 46.246.84[.]74in 2 reports
- 72.11.142[.]240in 2 reports
- 657a78dcd2c190f00b2f4ef745dd2cddin 2 reports
- 2707299e9ec7fb21…4d74865cf5a3in 2 reports
- 17e0b8fe9acfd177…f051f7e0f91fin 2 reports
- ac85af8395d1b97a…ce119e3c4955in 2 reports
Copy these 14 indicators · defanged
Thanks — we review every report.