Russian IoC Megathread

All,

I know the discussion about the Russian attacks has begun.

As a community I think we did great with Log4j and I think we should be helping each other out about what IoCs Russian/State Actors are using.

I'll throw my 2 cents in the hopes that others have more information that I don't have.

Currently I'm aware of the following items:
Hermetic Wiper
[https://securityintelligence.com/posts/new-destructive-malware-cyber-attacks-ukraine/](https://securityintelligence.com/posts/new-destructive-malware-cyber-attacks-ukraine/)

CISA Advisory
[https://www.cisa.gov/uscert/ncas/current-activity/2022/01/11/cisa-fbi-and-nsa-release-cybersecurity-advisory-russian-cyber](https://www.cisa.gov/uscert/ncas/current-activity/2022/01/11/cisa-fbi-and-nsa-release-cybersecurity-advisory-russian-cyber)

Thanks everyone for your help with this!

cybersecurity ioc russian