← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Onyx Sleet uses array of malware to gather intelligence for North Korea | Microsoft Security Blog
WHITE Onyx Sleet CyberHunter_NL 2024-07-29 Modified: 2024-08-28
48
IOCs
MEDIUM VOLUME
Onyx Sleet, Microsoft’s most advanced cyber-espionage tool, is being used to gather intelligence for North Korea, the company has announced. £1.5bn
onyx sleetmicrosoftsmalltigervalidalphacveidlog4jtigerratendpointunitedsouth korearatstdrop2sliverthemidavmprotectdtrackjunevirustotalfebruarydefenderprojecttwitterdorac++durianbeaconlighthandh0lygh0st
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Dora C++ DurianBeacon LightHand ValidAlpha H0lyGh0st Dtrack SmallTiger
Indicators of Compromise (13 / 48 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 CVE URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 f32f6b229913d68daad937cc72a57aa45291a9d623109ed48938815aa7b6005c — 2024-07-29
FileHash-SHA256 0837dd54268c373069fc5c1628c6e3d75eb99c3b3efc94c45b73e2cf9a6f3207 — 2024-07-29
FileHash-SHA256 1b88b939e5ec186b2d19aec8f17792d493d74dd6ab3d5a6ddc42bfe78b01aff1 — 2024-07-29
FileHash-SHA256 29c6044d65af0073424ccc01abcb8411cbdc52720cac957a3012773c4380bab3 — 2024-07-29
FileHash-SHA256 3098e6e7ae23b3b8637677da7bfc0ba720e557e6df71fa54a8ef1579b6746061 — 2024-07-29
FileHash-SHA256 7339cfa5a67f5a4261c18839ef971d7f96eaf60a46190cab590b439c71c4742b — 2024-07-29
FileHash-SHA256 868a62feff8b46466e9d63b83135a7987bf6d332c13739aa11b747b3e2ad4bbf — 2024-07-29
FileHash-SHA256 8daa6b20caf4bf384cc7912a73f243ce6e2f07a5cb3b3e95303db931c3fe339f — 2024-07-29
FileHash-SHA256 96118268f9ab475860c3ae3edf00d9ee944d6440fd60a1673f770d150bfb16d3 — 2024-07-29
FileHash-SHA256 c1a09024504a5ec422cbea68e17dffc46472d3c2d73f83aa0741a89528a45cd1 — 2024-07-29
FileHash-SHA256 c2500a6e12f22b16e221ba01952b69c92278cd05632283d8b84c55c916efe27c — 2024-07-29
FileHash-SHA256 f1662bee722a4e25614ed30933b0ced17b752d99fae868fbb326a46afa2282d5 — 2024-07-29
FileHash-SHA256 fed94f461145681dc9347b382497a72542424c64b6ae6fcf945f4becd2d46c32 — 2024-07-29
References (1)
↗ https://www.microsoft.com/en-us/security/blog/2024/07/25/onyx-sleet-uses-array-of-malware-to-gather-intelligence-for-north-korea/