>samit_hota
Back to IOCs

Indicators of Compromise

6 INDICATORSG0037win.terra_stealer

TerraStealer — Indicators of Compromise

Samit Hota·
#ioc#terrastealer

Overview

Indicators of compromise associated with TerraStealer. 6 indicators listed below, linked to the G0037 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
sha1_hashe202edf94b706e5596283aa3456760de6bcbcd54August 4, 202695%
md5_hash6435611106d0d7b3301229b9021a9908August 4, 202695%
sha1_hash71147bd6657f1dc2837aaa54d2b4567ebb81ef31August 4, 202695%
md5_hash83928513bb5518e71704d089dedfe44dAugust 4, 202695%
sha256_hash0d29741bb7161b12319909ecbbfb6029b08fe80c98fc8a93658ea14fededdfd9August 4, 202695%
sha256_hashbc7d5b9ae130f1b9c5a41517d56d9213950ef7f9b1ed78d9f33a4b2797d009e1August 4, 202695%

Related content

Adversary Profile

FIN6: From POS Skimming to Ransomware and Enterprise Infiltration

Adversary Profile

Evilnum (G0120): Persistent Financial Threat and Evolving Espionage Actor

IOCs

404 Keylogger — Indicators of Compromise

IOCs

5.t Downloader — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call