Indicators of Compromise

Domain

TLP:CLEAR

ADORE.XSECbackdoor

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

makecab.exe

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

7bb719f1c64d627ecb1f13c97dc050a7bb1441497f26578f7b2a9302adbbb128

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

6e896099a3ceb563f43f49a255672cfd14d88799f29617aa362ecd2128446a47

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

21ene.ip-ddns.com

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Report.exe

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

5b476e05aacea9edc14f7e4bab1b724ef54915f30c39ac87503ed395feae611e

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Gaza.pdf

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Packer.Win.VBNetCrypter

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Final1278685280.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

njnjnjs.duckdns.org

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Tools.Ande

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

xx2.vbs

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

b167a0bc7b097550a89a5ba4cb258592

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

rxms.duckdns.org

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

msedge.exe

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

177.255.85.101

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

fuck.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

roma.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

elyeso.ip-ddns.com

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

48b6064beec687fc110145cf7a19640d

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

frances-thomas.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

fausto-barb.website

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

runawy.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Formulario.html

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

redtube.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Notifications.exe

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

62.60.226.64

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

republicadominica2025.ip-ddns.com

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

1b39fce74193dd2cd5c36b2f8b626273

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

SHA-256 Hash

TLP:CLEAR

6df9cb909b321c24656b218a06dad56bb7916d8ce7de2342321f648af0124e56

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

SHA-1 Hash

TLP:CLEAR

d2106fa68e2e6416914855bb4898969365441685

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

SHA-1 Hash

TLP:CLEAR

8e49c3ee98fc722c77b3b37e3abafb3581369b6e

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

SHA-1 Hash

TLP:CLEAR

aaba9f60d81467c27c82f5c6d6cb6accd6890fc4

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

SHA-1 Hash

TLP:CLEAR

7e6b6b6ebd64d458a3ee0ce58bce0ddbbc0bb5e9

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

MD5 Hash

TLP:CLEAR

5db8e71b8e82661408f96b43e7ae8faf

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

MD5 Hash

TLP:CLEAR

487557c9b7288a6b035911a7652ad57c

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

MD5 Hash

TLP:CLEAR

09f402a02b615dcd14786aaa840db0a2

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

SHA-256 Hash

TLP:CLEAR

2a9b971c835e2ee5f190d068c602601fdaf718d8bfe085c2032d59a6f25ed082

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

SHA-256 Hash

TLP:CLEAR

42910bf2aa4ac9d62e2b32e6fadc42f11bd7215fee492ecf72cfd6238965d066

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

MD5 Hash

TLP:CLEAR

6616717dfb2a795113b47d862c5412e2

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

MD5 Hash

TLP:CLEAR

99732e49668e56527963742922277459

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

SHA-256 Hash

TLP:CLEAR

111e42c31f8e4ae3764f339d7ad04b20bb21be5d97ede13aaa7c73e72cb7549d

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

MD5 Hash

TLP:CLEAR

0b6f7356919b9632c1158681ee0462f3

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

MD5 Hash

TLP:CLEAR

4d5074d6e0722ceec45a083fa8444164

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

SHA-1 Hash

TLP:CLEAR

7b50320a005cf68e5c17d51a8fd8422ceef1611a

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

SHA-1 Hash

TLP:CLEAR

aba35de9e819396f89f34c03058ebe71a7f98b6b

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

MD5 Hash

TLP:CLEAR

a6d095dc0e01f97db7e74cb5bed402dc

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

SHA-1 Hash

TLP:CLEAR

940658590d938380b71fd5055635c02564a63ef1

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03

SHA-1 Hash

TLP:CLEAR

c22150121a13713b395a155af5d55680dde56ac1

Attack Activity Analysis Using SSH+TOR Tunnels for Covert Persistence

75% confidence

Added

2026-05-03