← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Onyx Sleet uses array of malware to gather intelligence for North Korea | Microsoft Security Blog
WHITE Onyx Sleet CyberHunter_NL 2024-07-29 Modified: 2024-08-28
48
IOCs
MEDIUM VOLUME
Onyx Sleet, Microsoft’s most advanced cyber-espionage tool, is being used to gather intelligence for North Korea, the company has announced. £1.5bn
onyx sleetmicrosoftsmalltigervalidalphacveidlog4jtigerratendpointunitedsouth korearatstdrop2sliverthemidavmprotectdtrackjunevirustotalfebruarydefenderprojecttwitterdorac++durianbeaconlighthandh0lygh0st
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Dora C++ DurianBeacon LightHand ValidAlpha H0lyGh0st Dtrack SmallTiger
Indicators of Compromise (10 / 48 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 CVE URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 b312dd587e8725edf782e0c176b902fbbfc01468 SHA1 of f32f6b229913d68daad937cc72a57aa45291a9d623109ed48938815aa7b6005c 2024-07-29
FileHash-SHA1 0f3b24e4e3e44bf60c5aad5b457fd8e0f6836c29 SHA1 of 7339cfa5a67f5a4261c18839ef971d7f96eaf60a46190cab590b439c71c4742b 2024-07-29
FileHash-SHA1 6624c7b8faac176d1c1cb10b03e7ee58a4853f91 — 2024-07-29
FileHash-SHA1 8bceaaa270b38fcb0aebae1abd74477754c189c8 SHA1 of 0837dd54268c373069fc5c1628c6e3d75eb99c3b3efc94c45b73e2cf9a6f3207 2024-07-29
FileHash-SHA1 926bfb37f292c1f4e37b1ad00b9edd7d4ee557d9 SHA1 of c2500a6e12f22b16e221ba01952b69c92278cd05632283d8b84c55c916efe27c 2024-07-29
FileHash-SHA1 a100daa33d7db6d2424ac1a8c9ec4b3ae8a3105c SHA1 of 3098e6e7ae23b3b8637677da7bfc0ba720e557e6df71fa54a8ef1579b6746061 2024-07-29
FileHash-SHA1 ab76f74f61428d15ab4e1dacc0824d1770c34689 SHA1 of 868a62feff8b46466e9d63b83135a7987bf6d332c13739aa11b747b3e2ad4bbf 2024-07-29
FileHash-SHA1 b3a4a86e27afe3872c52e007be93a71ee3f867ee SHA1 of c1a09024504a5ec422cbea68e17dffc46472d3c2d73f83aa0741a89528a45cd1 2024-07-29
FileHash-SHA1 dfe5d75ed31b6cfc2cceebb1404d3eabc02f0021 SHA1 of 8daa6b20caf4bf384cc7912a73f243ce6e2f07a5cb3b3e95303db931c3fe339f 2024-07-29
FileHash-SHA1 e2f78ec89d80ed5c0299856fee84cc78c5d7f7ba SHA1 of fed94f461145681dc9347b382497a72542424c64b6ae6fcf945f4becd2d46c32 2024-07-29
References (1)
↗ https://www.microsoft.com/en-us/security/blog/2024/07/25/onyx-sleet-uses-array-of-malware-to-gather-intelligence-for-north-korea/