← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Microsoft Teams Phishing Attack Using Darkgate Malware
WHITE cryptocti 2023-10-05 Modified: 2023-11-04
83
IOCs
HIGH VOLUME
microsoft teamstruesecdarkgatedarkgate loaderjunemicrosoftzerofoxaugustofficezip fileautoitchatscreenshottersophoslinuxblogresponsecybersecurityautoit scriptstronglnk filesharepointvirustotalmalspamemotetteammalwareteams malspamtisifipe filec2 serverwindowsxor keymsi filedelphittpsdiscordnirsoftstubjumpsecmax corbridgetom ellsonred teamcorbridgeclientjumpsec redteamsphisherteamspost requestandrea santesekanbach
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Sophos Linux Teams Malspam Emotet Microsoft Teams Tisifi DarkGate
Indicators of Compromise (5 / 83 total)
All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL email hostname domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 5b070fa4cab960e10d562a2d67a463dfe6b8b0e7 SHA1 of bcd449470626f4f34a15be00812f850c5e032723e35776fb4b9be6c7be6c8913 2023-10-05
FileHash-SHA1 6a6f9ea7f16fea5a24597937d8ba51e39479c863 SHA1 of 09904d65e59f3fbbbf38932ae7bff9681ac73b0e30b8651ec567f7032a94234f 2023-10-05
FileHash-SHA1 a33d7c5de81a77ee76b4f873176eb194bc0f30fd SHA1 of 4c21711de81bb5584d35e744394eed2f36fef0d93474dfc5685665a9e159eef1 2023-10-05
FileHash-SHA1 b79b60124b1c7231f359d011465d72ad9f3c0246 SHA1 of 0c59f568da43731e3212b6461978e960644be386212cc448a715dbf3f489d758 2023-10-05
FileHash-SHA1 23893f035f8564dfea5030b9fdd54120d96072bb SHA1 of 6e068b9dcd8df03fd6456faeb4293c036b91a130a18f86a945c8964a576c1c70 2023-10-05
References (1)
↗ September 10th 2023 - CryptoGen Cyber Threat Intelligence - #3215 - Microsoft Teams Phishing Attack Using Darkgate Malware