Indicators of Compromise

Domain

TLP:CLEAR

WeLiveSecurity.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Spy.Agent.ORM

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Spy.Sekur

50% confidence

Added

2026-08-09

IPV4

TLP:CLEAR

107.180.113.255

ThreatFox: Cobalt Strike

85% confidence

Added

2026-05-21

SHA-1 Hash

TLP:CLEAR

ff62e30eb38116b3273543f9ace038c4d0003f9c

Carbanak

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

21e79ae1d7a5f020c171f412cbb92253

Carbanak

70% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

ccd96a0b38d2edd14e290c597a7371e412429515

Carbanak

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

77a6fbd4799a8468004f49f5929352336f131ad83c92484b052a2eb120ebaf9a

Carbanak

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

42d3cf75497a724e9a9323855e0051971816915fc7eb9f0426b5a23115a3bdcb

Carbanak

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

4b32521cc8a8c050fbc55b3f9d05c84d

Carbanak

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

aaa.stage.15594901.en.onokder.com

Carbanak Cobalt Strike / Meterpreter DNS Beacon C&Cs

50% confidence

Added

2026-05-06

Domain

TLP:CLEAR

aaa.stage.4710846.ns3.kiposerd.com

Carbanak Cobalt Strike / Meterpreter DNS Beacon C&Cs

50% confidence

Added

2026-05-06