Indicators of Compromise

Domain

TLP:CLEAR

pedantismo.avengerbuys.info

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

pedantismo.avengerbuys.info

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

waffordanticonstitutionnels.stixjeweler.com

September hostname

40% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

469abc3cf1e3b871566cf404c1e382a5b7a20212

(dropper, from cab-archive) - Danti - Xchecked via VT: 6bbdbf6d3b24b8bfa296b9c76b95bb2f

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

9e7e5f70c4b32a4d5e8c798c26671843e76bb4bd5967056a822e982ed36e047b

(dropper, from cab-archive) - Danti - Xchecked via VT: 6bbdbf6d3b24b8bfa296b9c76b95bb2f

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

f49bbd7f0ecfa75b134e2cf0acc9931872d79072069f35a49f6de1a0a2347e2a

(update.dat) - Danti - Xchecked via VT: d44e971b202d573f8c797845c90e4658

70% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

fe48b93058cf7e0ff9c27ec9322015d230545646

(http.exe) - Danti - Xchecked via VT: 3fbe576d33595734a92a665e72e5a04f

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

ba0b721350a6fcc036b0b78cc13ecb154a4f11d221c1be763ee3c559ef544028

(Holidays in India in 2016) - Danti - Xchecked via VT: d91f101427a39d9f40c41aa041197a9c

70% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

9fcf5973260f0c5ca3f95570b76dbaab1a1c28d3

(Holidays in India in 2016) - Danti - Xchecked via VT: d91f101427a39d9f40c41aa041197a9c

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

bfe23053efd11dbe2d577e25f5d029c0e145f0ef1c14753e03010e95c1d1d910

(Holidays in India in 2016) - Danti - Xchecked via VT: 8cd2eb90fabd03ac97279d398b09a5e9

70% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

81a82080da14b670a39d5b34728a9e79ba7ccbec

(Holidays in India in 2016) - Danti - Xchecked via VT: 8cd2eb90fabd03ac97279d398b09a5e9

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

b75ab0079160d388f92e641789415566e0b9e276859ebe3b9d08f074d9d2fd74

RarSFX - Danti - Xchecked via VT: d0407e1a66ee2082a0d170814bd4ab02

70% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

eeccda3083a268c377f65574a8e7ac8ceffed20a

RarSFX - Danti - Xchecked via VT: d0407e1a66ee2082a0d170814bd4ab02

70% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

58b6b5fd3f2bfd182622f547a93222a4afdf4e76

Potplayer - Danti - Xchecked via VT: f16903b2ff82689404f7d0820f461e5d

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

904a005e253a723263274c46236739cc907471f597e333836e153da142c62dc1

(appinfo.dat) - Danti - Xchecked via VT: 2460871a040628c379e04f79af37060d

70% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

1cabd426bc1b1825f045c21f6face31a9512a1fc

(appinfo.dat) - Danti - Xchecked via VT: 2460871a040628c379e04f79af37060d

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

705409bc11fb45fa3c4e2fa9dd35af7d4613e52a713d9c6ea6bc4baff49aa74a

(potplayer.dll) - Danti - Xchecked via VT: 332397ec261393aaa58522c4357c3e48

70% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

6f10644a4509d6fc8bbefee04db855b43d9f91c5

(potplayer.dll) - Danti - Xchecked via VT: 332397ec261393aaa58522c4357c3e48

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

ad191d1d18841f0c5e48a5a1c9072709e2dd6359a6f6d427e0de59cfcd1d9666

(http.exe) - Danti - Xchecked via VT: 3fbe576d33595734a92a665e72e5a04f

70% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

af3ae8a6164e31b366ec372d699e1c89ad1b42fc

(update.dat) - Danti - Xchecked via VT: d44e971b202d573f8c797845c90e4658

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

e60bd3259177f787718e940c1bb2196ffd3ea0d1f722cc644c85006ddb7a28f3

(India, chumarpost@gmail.com) - Danti - Xchecked via VT: 1ba92c6d35b7a31046e013d35fa48775

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

8cd2eb90fabd03ac97279d398b09a5e9

(Holidays in India in 2016) - Danti

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

3fbe576d33595734a92a665e72e5a04f

(http.exe) - Danti

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

d44e971b202d573f8c797845c90e4658

(update.dat) - Danti

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

332397ec261393aaa58522c4357c3e48

(potplayer.dll) - Danti

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

2460871a040628c379e04f79af37060d

(appinfo.dat) - Danti

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

f16903b2ff82689404f7d0820f461e5d

Potplayer - Danti

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

d0407e1a66ee2082a0d170814bd4ab02

RarSFX - Danti

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

4902abe46039d36b45ac8a39c745445a

RarSFX - Danti

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

07f4b663cc3bcb5899edba9eaf9cf4b5

(India, from Mission list) - Danti

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

a90a329335fa0af64d8394b28e0f86c1

(India, HQ List) - Danti

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

b751323586c5e36d1d644ab42888a100

(India, Hotels) - Danti

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

d91f101427a39d9f40c41aa041197a9c

(Holidays in India in 2016) - Danti

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

1ba92c6d35b7a31046e013d35fa48775

(India, chumarpost@gmail.com) - Danti

70% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

8f2b1de6ef70b1ac5ffb8f3aa77af6c402cfdf56

(India, chumarpost@gmail.com) - Danti - Xchecked via VT: 1ba92c6d35b7a31046e013d35fa48775

70% confidence

Added

2026-05-06

IPv4 Address

TLP:CLEAR

115.144.69.54

Danti

70% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

6bbdbf6d3b24b8bfa296b9c76b95bb2f

(dropper, from cab-archive) - Danti

70% confidence

Added

2026-05-06

IPv4 Address

TLP:CLEAR

180.150.227.135

Danti

70% confidence

Added

2026-05-06

IPv4 Address

TLP:CLEAR

74.208.4.201

Danti

70% confidence

Added

2026-05-06

IPv4 Address

TLP:CLEAR

74.208.4.200

Danti

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

dnsnews.dns05.com

Danti

70% confidence

Added

2026-05-06