MuddyWater__2023__Deepinstinct_MuddyWater-spearphishing-new-TTPs_11-01-2023.pdf
ID: 07ae019d-75e7-49c4-a8ab-aaf8fb6d12de
STIX ID: report--07ae019d-75e7-49c4-a8ab-aaf8fb6d12de
Threat Score
85/100
Uploaded: 2026-08-19
Published Date: 2023-12-12
Last Modified Date: 2023-12-12
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
Deep Instinct describes an active MuddyWater spear‑phishing campaign against Israeli targets that uses Storyblok-hosted archives and malicious LNK shortcuts to run an intermediate Diagnostic.exe which launches a signed Advanced Monitoring Agent (remote administration tool) while revealing a decoy Israeli government memo; the report details the infection chain, updated TTPs, and provides MD5 hashes, URLs, and IP IOCs for detection and response.