【ニュース】
◆脅威アドバイザリ：SolarWinds サプライチェーン攻撃 (Cisco Japan Blog, 2021/01/12)
https://gblogs.cisco.com/jp/2021/01/talos-solarwinds-supplychain-coverage/
【インディケータ情報】
■ハッシュ情報(Sha256) - SUNBURST -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(以上は Cisco Japan Blog の情報: 引用元は https://gblogs.cisco.com/jp/2021/01/talos-solarwinds-supplychain-coverage/ )
■ハッシュ情報(Sha256) - TEARDROP -
b820e8a2057112d0ed73bd7995201dbed79a79e13c79d4bdad81a22f12387e07
1817a5bf9c01035bcf8a975c9f1d94b0ce7f6a200339485d8f93859f8f6d730c
118189f90da3788362fe85eafa555298423e21ec37f147f3bf88c61d4cd46c51
(以上は Cisco Japan Blog の情報: 引用元は https://gblogs.cisco.com/jp/2021/01/talos-solarwinds-supplychain-coverage/ )
■ハッシュ情報(Sha256) - SUPERNOVA -
c15abaf51e78ca56c0376522d699c978217bf041a3bd3c71d09193efa5717c71 (SUPERNOVA)
(以上は Cisco Japan Blog の情報: 引用元は https://gblogs.cisco.com/jp/2021/01/talos-solarwinds-supplychain-coverage/ )
■FQDN情報 - SUNBURST -
avsvmcloud[.]com
zupertech[.]com
panhardware[.]com
databasegalore[.]com
incomeupdate[.]com
highdatabase[.]com
websitetheme[.]com
freescanonline[.]com
virtualdataserver[.]com
deftsecurity[.]com
thedoccloud[.]com
digitalcollege[.]org
globalnetworkissues[.]com
seobundlekit[.]com
virtualwebdata[.]com
(以上は Cisco Japan Blog の情報: 引用元は https://gblogs.cisco.com/jp/2021/01/talos-solarwinds-supplychain-coverage/ )
【検索】
google: 019085a76ba7126fff22770d71bd901c325fc68ac55aa743327984e89f4b0134
google: 32519b85c0b422e4656de6e6c41878e95fd95026267daab4215ee59c107d6c77
google: ac1b2b89e60707a20e9eb1ca480bc3410ead40643b386d624c5d21b47c02917c
google: c09040d35630d75dfef0f804f320f8b3d16a481071076918e9b236a321c1ea77
google: ce77d116a074dab7a22a0fd4f2c1ab475f16eec42e1ded3c0b0aa8211fe858d6
google: d0d626deb3f9484e649294a8dfa814c5568f846d5aa02d4cdad5d041a29d5600
google: dab758bf98d9b36fa057a66cd0284737abf89857b73ca89280267ee7caf62f3b
google: 0f5d7e6dfdd62c83eb096ba193b5ae394001bac036745495674156ead6557589
google: db9e63337dacf0c0f1baa06145fd5f1007002c63124f99180f520ac11d551420
google: eb6fab5a2964c5817fb239a7a5079cabca0a00464fb3e07155f28b0a57a2c0ed
google: abe22cf0d78836c3ea072daeaf4c5eeaf9c29b6feb597741651979fc8fbd2417
google: 20e35055113dac104d2bb02d4e7e33413fae0e5a426e0eea0dfd2c1dce692fd9
google: 2ade1ac8911ad6a23498230a5e119516db47f6e76687f804e2512cc9bcfda2b0
【VT検索】
https://www.virustotal.com/gui/file/
https://www.virustotal.com/gui/ip-address/
https://www.virustotal.com/gui/domain/
https://www.virustotal.com/gui/url/
