Hellsing__2015__Indicators_of_Compormise_Hellsing.pdf

This report compiles Indicators of Compromise and detection rules for the Hellsing APT toolset: dozens of MD5 hashes, C2 IPs and domains, suspicious filenames and registry/driver artifacts, domain registrant details, and several YARA rules for installers and implants (xweber/msger/xkat/irene). The content is actionable for detection and threat hunting and is attributed to Kaspersky researchers.