>samit_hota
Back to IOCs
G01273 indicators

ElectroRAT — Indicators of Compromise

Samit Hota·
#ioc#electrorat

Overview

Indicators of compromise associated with ElectroRAT. 3 indicators listed below, linked to the G0127 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
sha1_hashc6c0210e1e5828aef772a030ce9a4e93f31c1848August 2, 202695%
md5_hash24dc5145757e9f438e801518bc74c0c7August 2, 202695%
sha256_hash0ffec6082c9540ac473d603f278168458f574ac9018ba5ed9b7b1e7ec1539133August 2, 202695%

Related content

Adversary Profile

TA551: Persistent Initial Access Broker Fueling Cybercrime

IOCs

Bashlite — Indicators of Compromise

IOCs

Sliver — Indicators of Compromise

IOCs

5.t Downloader — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call