>samit_hota
Back to IOCs

Indicators of Compromise

3 INDICATORSG0067win.rokrat

RokRAT — Indicators of Compromise

Samit Hota·
#ioc#rokrat

Overview

Indicators of compromise associated with RokRAT. 3 indicators listed below, linked to the G0067 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
sha256_hash47a9e572a1062abd16b0a0df256ba0c4b6b4660125844ca8ddbf22714f6beb30October 15, 202695%
sha1_hash0921c29f459c03aa2ad7ac9b4482e7bf4c84214dOctober 15, 202695%
md5_hash069f2134a0ef7d7c30b1c607d2386c19October 15, 202695%

Related content

Adversary Profile

APT37 (ScarCruft): North Korea's Evolving Cyber Espionage Group

IOCs

Konni — Indicators of Compromise

IOCs

404 Keylogger — Indicators of Compromise

IOCs

5.t Downloader — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call