IOC du rapport source : https://opensourcemalware.com/blog/introducing-weaselbiscuit
Affichage neutralisé. Un observable associé n'est pas une preuve de compromission ni une consigne de blocage.
ipv4	103[.]170[.]217[.]184	revoked
sha256	7b15605f23b131b3eeea57e031ae7cb32fc4b78c7bbb2025aa7a561ea5ae5159	active
url	hxxp[:]//103[.]170[.]217[.]184[:]8787	revoked
url	hxxps[:]//api[.]npoint[.]io/24c12c4b66a29747764f	revoked
url	hxxps[:]//api[.]npoint[.]io/24c25d5f5fcbb0992a4f	revoked
url	hxxps[:]//api[.]npoint[.]io/33e8d008c334b060adad	revoked
url	hxxps[:]//api[.]npoint[.]io/37c0a0c68bf7a94ed731	revoked
url	hxxps[:]//api[.]npoint[.]io/641d37178a880b1e8b8f	revoked
url	hxxps[:]//api[.]npoint[.]io/933a731a5e97f4b45249	revoked
url	hxxps[:]//api[.]npoint[.]io/ddae72efbb6714fae922	revoked