✕
Request a Demo
Rewterz
Rewterz Threat Alert – REvil Ransomware – Active IOCs
September 9, 2021
Rewterz
Rewterz Threat Alert – Dridex Banking Trojan – Active IOCs
September 9, 2021

Rewterz Threat Alert – APT32 Ocean Lotus – Active IOCs

Severity

High

Analysis Summary

Cyber espionage actors, aka APT32 (OceanLotus Group), are carrying out intrusions into private sector companies across multiple industries and have also targeted foreign governments, dissidents, and journalists. APT32 leverages a unique suite of fully-featured malware, in conjunction with commercially available tools, to conduct targeted operations that are aligned with Vietnamese state interests.

advisory-1628769213.png

Impact

  • Information Theft and Espionage

Indicators of Compromise

Filename

  • MSVCR100[.]dll

MD5

  • 1dbd3e88bc5cb77a7401cb49b44f554e

SHA-256

  • f19c7115755ed90c0ad5dfc9321b44aa43228e80a2cd5bc714fc6a1ddcd0d3a6

SHA-1

  • 844264bd15330e7d887051e7a7d062fdef72f49b

Remediation

  • Block all the threat indicators at your respective controls.
  • Search for IOCs in your environment.