Technique
technique:indicators_of_compromise
Also: IOCs, indicators of compromise
File names, hashes, and strings shared so defenders can search their environments for evidence of malware.
File names, hashes, and strings shared so defenders can search their environments for evidence of malware.
“these are some highly-probable indicators of compromise”
“I found some strings in those pieces of malware that I think would be beneficial for people to use to search for in their environment”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Mohammed Aldoub | Explicit | 120 |
Mohammed Aldoub USES Indicators of compromise
Mohammed submitted malware hashes and shared indicators so people in the region could search their environments for the attack.
Explicit Confidence 99% · Mohammed Aldoub EP 120 Details
“submitted the hashes for that piece of malware so that anybody in the region could search for those hashes in their environment”
“these are some highly-probable indicators of compromise”