2021-09-16 Griffon IOCs

THREAT IDENTIFICATION:  GRIFFON (aka Harpy)

SUBJECTS OBSERVED
Obligations of vaccination companies

SENDERS OBSERVED
dvyf@evolvingdesk.nl

IMPERSONATED SENDERS
us.company-policy@hrsa.gov

GRIFFON ZIP FILE HASHES
Vaccine appointment - employees list.zip
9ff6639fdaf77621d0af5e34b388f223

GRIFFON JAVASCRIPT FILE HASH PAYLOAD
10.2021 - Current list of employees who were included to the vaccine schedule.txt.js
f1680aa55c88220bcf83e24d89628cc9

GRIFFON C2
https://civilizationidium.com/

SUPPORTING EVIDENCE
https://app.any.run/tasks/18addfaa-d7a0-4ce8-9cd3-50904ada4c7f/
https://app.any.run/tasks/53d539c0-4d0a-48fd-b324-8f6eb8d7b3d1/