Threat Intelligence: Pyramid of Pain
Overview
A SOC analyst exercise investigating a suspicious file hash.
Key findings
- Verdict: malicious. 47 of 65 vendors flagged the file, with a community score of -293. It was identified as a trojan from the FlagPro family, commonly linked to the BlackTech threat group.
- Extracted indicators (hash values, IP addresses, domain names, network and host artifacts, tools and TTPs) and mapped each to its level on the Pyramid of Pain.
The deliverable
