Indicators of Compromise

Domain

TLP:CLEAR

Trojan.Filerase

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Backdoor.Duuzer

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

CFR.org

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Bit.ly

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Hillaryclinton.com

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

FBI.pdf

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

clearskysecurity.net

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Clearskysec.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

OBc7Y.RipDKb

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

PnleUc.qs41qe.RipDKb

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

PnleUc.RipDKb

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

W0gjSc.PZzKCf

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

VfPpkd-aJasdd-RWgCYc-wQNmvb.VfPpkd

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

c-wiz.rETSD

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

PETVs.PETVs

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

bCsmhd.RipDKb

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

qdOxv-fmcmS-yrriRe-OWXEXe-INsAgc.qdOxv

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

wwLWwb.eLTZue

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

rrfsAf.slide

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

rrfsAf.slide-over.messenger

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

mUIrbf-LgbsSe.mUIrbf

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

qdOxv-fmcmS-yrriRe-OWXEXe-B7I4Od.qdOxv

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

qdOxv-fmcmS-yrriRe-OWXEXe-i3jM8c-fmcmS.qdOxv

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

qdOxv-fmcmS-yrriRe-OWXEXe-SfQLQb-M1Soyc-Bz112c.qdOxv

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

qdOxv-fmcmS-yrriRe-OWXEXe-V67aGc-zvnfze.qdOxv

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

qdOxv-fmcmS-yrriRe-OWXEXe-SfQLQb-UbuQg-Bz112c.qdOxv

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

qdOxv-fmcmS-yrriRe-OWXEXe-SfQLQb-M1Soyc-Bz112c.qdOxv-fmcmS-yrriRe-OWXEXe-SfQLQb-UbuQg-Bz112c.qdOxv

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

qdOxv-fmcmS-yrriRe-OWXEXe-i3jM8c-fmcmS.qdOxv-fmcmS-yrriRe-OWXEXe-V67aGc-zvnfze.qdOxv

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

qdOxv-fmcmS-yrriRe.qdOxv

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

qdOxv-fmcmS-w6QsKd-FoKg4d-sLO9V-YoZ4jf.qdOxv

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

pYTkkf-Bz112c-kBDsod-Rtc0Jf.pYTkkf

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

FOBRw-LgbsSe.FOBRw

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

O68mGe-xl07Ob-ibnC6b-OWXEXe-gk6SMd.aqdrmf

50% confidence

Added

2026-08-08

Filename

TLP:CLEAR

entry.client-xi9AqQZ0.js

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

panel.sql

50% confidence

Added

2026-08-08

MD5 Hash

TLP:CLEAR

29144c2f5acd859adf08d42ffcd74f50

Ransomware.live IOC (0apt): 29144c2f5acd859adf08d42ffcd74f50

75% confidence

Added

2026-05-05

MD5 Hash

TLP:CLEAR

fb42dec2c39cd7884ca4cb6b76308f51

Ransomware.live IOC (0apt): fb42dec2c39cd7884ca4cb6b76308f51

75% confidence

Added

2026-05-05

MD5 Hash

TLP:CLEAR

0f7d721e4e5e2ce0a5c629f2fd4ac572

Ransomware.live IOC (0apt): 0f7d721e4e5e2ce0a5c629f2fd4ac572

75% confidence

Added

2026-05-05

MD5 Hash

TLP:CLEAR

370fbcc6711fb983ae4679f02c5ac461

Ransomware.live IOC (0apt): 370fbcc6711fb983ae4679f02c5ac461

75% confidence

Added

2026-05-05