Watermark

CTI Telemetry

VirusTotal Analysis

Infostealer analysis by HudsonRock

6
🧠 Dispositivi infetti
3
🌐 Utenti compromessi
3
πŸ§‘β€πŸ’Ό Dipendenti compromessi
13
πŸ”‘ Password aziendali
25
πŸ”‘ Password users

StealC 4
RedLine 2
Azorult 2
Lumma 2

https://airtelqa.icertis.com/auth/account/logon 2
https://icmgenu.icertis.com/auth/account/login 2
https://icmqa1.icertis.com:444/account/logon 2
https://icmsqa2.icertis.com:444/account/login 2
https://vpn2.icertis.com/+cscoe+/logon.html 2
https://β€’β€’β€’β€’β€’β€’β€’-β€’β€’β€’-β€’β€’β€’.icertis.com:β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’.β€’β€’β€’β€’β€’β€’ 1
https://β€’β€’β€’β€’β€’β€’β€’β€’.icertis.com/β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’ 1
http://β€’β€’β€’β€’β€’β€’β€’β€’-β€’β€’β€’.icertis.com:β€’β€’β€’β€’ 1

https://support.icertis.com/csm 4
http://products-tfs.icertis.com:8080/ 2
https://airtelqa.icertis.com/auth/account/login 2
https://ctsdev.icertis.com/auth/account/login 2
https://farmerspreprod.icertis.com/auth/account/logon 2
https://β€’β€’β€’β€’β€’β€’β€’.icertis.com/β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’ 2
https://β€’β€’β€’β€’β€’.icertis.com/β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’ 2
https://β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’.icertis.com/β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’ 2
https://β€’β€’β€’.icertis.com/ 2
https://β€’β€’β€’β€’β€’β€’β€’-β€’β€’β€’-β€’β€’β€’.icertis.com 2
https://β€’β€’β€’β€’β€’β€’β€’-β€’β€’β€’-β€’β€’β€’.icertis.com:β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’.β€’β€’β€’β€’β€’β€’ 2
https://β€’β€’β€’β€’β€’β€’β€’β€’.icertis.com/β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’ 1

Windows Defender 1
Not Found 1