#ParsedReport #CompletenessMedium
30-09-2026

Baba Yaga on the Hook: New Mimbrob Activity Targets Russia’s Military-Industrial Complex, IT Companies, and Military Personnel

https://www.f6.ru/blog/mimbrob/

Report completeness: Medium

Threats:
Mimbrob
Dll_sideloading_technique
Fbuloader
Gorat

Victims:
Aerospace industry, Defense industry, It companies, Research institutes, Military personnel

Industry:
Aerospace, Military

Geo:
Russian, Russia, Ukrainian

ChatGPT TTPs:
do not use without manual check
T1027, T1027.009, T1027.013, T1036, T1053.005, T1082, T1095, T1102.001, T1105, T1129, have more...

IOCs:
File: 19
Email: 3
Domain: 18
Url: 6
Command: 4
IP: 21
Path: 2
Hash: 40

Soft:
Dronner, Yandex Browser, ronner ap, YandexBrowser, Microsoft Edge, Task Scheduler, CocCoc, gamma

Algorithms:
md5, base64, zip, aes-gcm, rc4

Functions:
SignalChromeElf