IOC du rapport source : https://www.fortinet.com/blog/threat-research/uncovering-a-sectoprat-variant-embedded-in-legitimate-software
Affichage neutralisé. Un observable associé n'est pas une preuve de compromission ni une consigne de blocage.
md5	a12ba3a3dcd70e02f89253c9ec78b11f	active
sha256	37fcbcb21d16866784050682c58424c91d3a736f6fd599271fa6e53cf5ca8a92	active
sha256	48d3ecbb9e0b6babe6e53e2082a076bad07ef61ccd98dcc8b9e4f390b937788b	active
sha256	95f6abd3c43ef4b33cd61d054527233dd2ce705804d44a04be96cfb73bb52e3a	active
sha256	efa07701570983909ef923ea79bb032f19fd9dac0b819fa0e4f6b1161a4cc221	active
url	hxxp[:]//98[.]142[.]252[.]140[:]15847	active
url	hxxp[:]//98[.]142[.]252[.]140[:]9000/wmglb	active
url	hxxps[:]//bsc-dataseed1[.]defibit[.]io/	active
url	hxxps[:]//bsc-dataseed1[.]ninicoin[.]io/	active
url	hxxps[:]//bsc-dataseed2[.]defibit[.]io/	active
url	hxxps[:]//bsc-dataseed2[.]ninicoin[.]io/	active
url	hxxps[:]//bsc-dataseed3[.]defibit[.]io/	active
url	hxxps[:]//bsc-dataseed3[.]ninicoin[.]io/	active
url	hxxps[:]//bsc-dataseed4[.]defibit[.]io/	active
url	hxxps[:]//bsc-dataseed4[.]ninicoin[.]io/	active