Indicators of Compromise

IPv4 Address

TLP:CLEAR

20.103.221.187

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

pc.dll

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

146.70.161.78

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

185.76.78.117

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

4.232.170.137

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

euw.devtunnels.ms

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

m.cremessage.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

vnd.ms

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

local.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

do.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

do.bat

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

wsx.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

SoftwareUpgradeRpm.htm

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

getHashFlsa64.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

AddSecurityPackage64.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

bK2o.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

wsx1.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

gpsfinance.co.id

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

f0b182423107a04cf5f09b8559e656242a4fcc89

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

cc6fd90785a528883b0203138348df8bad69bb1a

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

a12db7b72879ac0f46079efd8c67e8ca0621f73b

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

09b0bc41f8838949d5a1c442ee2e2ec9ff892fdc

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

pr0fu5a.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

dog3rj.tech

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

q74vn.live

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

abwxjp5.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

servgate.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

zamstats.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

pickupweb.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

zrheblirsy.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

msonline.help

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

gouvn.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

emezonhe.me

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

IPv4 Address

TLP:CLEAR

188.127.251.171

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

skycloudcenter.com

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

4741c2884d1ca3a40dadd3f3f61cb95a59b11f99a0f980dbadc663b85eb77a2a

Indonesian Banking Sector Threat Landscape

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

5f22ec5c14dfd47c92850a5fb3bd8e3754d538b8021b6238238e4020336cfb5c

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

a43084f5af861f44c75c5273c779cb26d506cab6b51c33746626da504148a4ec

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

cd9397797216fd4c08df324937509124e57258328c8e4c6d795c6a2cd25b69b0

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

ebd533de7ca16daa70093b0b1084fb6136b6ba091d6ee0e4199762581e1b2e5a

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

f2bed071676feb831ed460489643fd57f6c6c1e0d024a1ea447820276fb13828

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05

URL

TLP:CLEAR

http://www.zohoapis.com/workdrive/api/v1/files

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

www.zohoapis.com

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05

MD5 Hash

TLP:CLEAR

c04c947efdfdd9ce24617903b6746a83

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05

SHA-1 Hash

TLP:CLEAR

43d646eda4166261eb1433c7599bf5cc9129a4f1

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

390148f5157c0f6b337ff19d162c3c2ee3e6d782fdfbe11fb1e411c0684fd33b

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

f53fd0626404a129dcddb8ee7589387dd7bda7999814e0df46c670af6b3da5f5

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05

SHA-1 Hash

TLP:CLEAR

8aeba3c711eaa0116807c66390284dfa572d2cc7

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

couldinstallup.com

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05

MD5 Hash

TLP:CLEAR

b267acd1b7c15b18178ae9fd4974f3f4

India's government and energy sectors targeted with ZOHOMURK and MINIRECON

75% confidence

Added

2026-07-05