Indicators of Compromise

Filename

TLP:CLEAR

Lively.Watchdog.exe

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

https://the-cassandra-files.ghost.io/file-s01e27-the_blind_watchdog_fails/

PhishTank: https://the-cassandra-files.ghost.io/file-s01e27-the_blind_watchdog_fails/

90% confidence

Added

2026-08-07

SHA-1 Hash

TLP:CLEAR

31c69b3e12936abca770d430066f379ec1d997ec

Botnet Analysis: A Product-Grade Threat for the AI Service Era

75% confidence

Added

2026-07-17

SHA-256 Hash

TLP:CLEAR

fc4109f5dd1d30b65dd60e57dc639ac1d313bfa5241e36e61fbc4aabc1cda482

Botnet Analysis: A Product-Grade Threat for the AI Service Era

75% confidence

Added

2026-07-17

MD5 Hash

TLP:CLEAR

ca024acead8f54cfe5b07ac4bdf7fcea

Botnet Analysis: A Product-Grade Threat for the AI Service Era

75% confidence

Added

2026-07-17

IPv4 Address

TLP:CLEAR

209.99.186.235

Botnet Analysis: A Product-Grade Threat for the AI Service Era

75% confidence

Added

2026-07-17

Domain

TLP:CLEAR

cdnorigin.net

Botnet Analysis: A Product-Grade Threat for the AI Service Era

75% confidence

Added

2026-07-17

MD5 Hash

TLP:CLEAR

6a0fe6065d76715feebc1526d456db73

A miner with a side of RAT: the unintended gift with your TV show or book

75% confidence

Added

2026-05-28

MD5 Hash

TLP:CLEAR

7f624407ae489324e96a708a09c17e6f

A miner with a side of RAT: the unintended gift with your TV show or book

75% confidence

Added

2026-05-28

Domain

TLP:CLEAR

5d14vnfb.space

A miner with a side of RAT: the unintended gift with your TV show or book

75% confidence

Added

2026-05-28

Domain

TLP:CLEAR

jeaw520i.space

A miner with a side of RAT: the unintended gift with your TV show or book

75% confidence

Added

2026-05-28

Domain

TLP:CLEAR

r7mvjl67.space

A miner with a side of RAT: the unintended gift with your TV show or book

75% confidence

Added

2026-05-28

Domain

TLP:CLEAR

zgj1tam9.space

A miner with a side of RAT: the unintended gift with your TV show or book

75% confidence

Added

2026-05-28

Domain

TLP:CLEAR

file.ipfs.us.69.mu

A miner with a side of RAT: the unintended gift with your TV show or book

75% confidence

Added

2026-05-28

Domain

TLP:CLEAR

qdmagva5.space

A miner with a side of RAT: the unintended gift with your TV show or book

75% confidence

Added

2026-05-28

MD5 Hash

TLP:CLEAR

000102030405060708090a0b0c0d0e0f

A miner with a side of RAT: the unintended gift with your TV show or book

75% confidence

Added

2026-05-28

MD5 Hash

TLP:CLEAR

0123456789abcdef0123456789abcdef

A miner with a side of RAT: the unintended gift with your TV show or book

75% confidence

Added

2026-05-28

Domain

TLP:CLEAR

urush1bar4.online

A miner with a side of RAT: the unintended gift with your TV show or book

75% confidence

Added

2026-05-28

MD5 Hash

TLP:CLEAR

02a43b3423367b9dddc24cc7dfc070df

A miner with a side of RAT: the unintended gift with your TV show or book

75% confidence

Added

2026-05-28

SHA256

TLP:CLEAR

88f4b2193b87a76bbf56fdb7c282438f2d07a320784b2fa663ac45776ccd8bec

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

URL

TLP:CLEAR

http://194.32.248.126/updates/Microsoft%20Windows%20Health%20Service%20Diagnostics.exe

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

URL

TLP:CLEAR

http://194.32.248.126/updates/svchost_laptop.exe

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

URL

TLP:CLEAR

http://194.32.248.126/updates/System%20Protection%20Background%20Task.exe

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

URL

TLP:CLEAR

http://194.32.248.126/updates/OneDrive%20Sync%20Shell%20Extension%20Processor.exe

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

URL

TLP:CLEAR

http://194.32.248.126/updates/Windows%20Update%20Diagnostic%20Task%20Handler.exe

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

URL

TLP:CLEAR

http://194.32.248.126/updates/Microsoft%20Windows%20PnP%20Device%20Driver%20Loader.exe

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

URL

TLP:CLEAR

http://194.32.248.126/updates/Windows%20Update%20Elevated%20Service.exe

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

SHA256

TLP:CLEAR

4dc1958010564d8482320890ef4bdc35e1055e2023ce6cd7588a9044a221553f

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

SHA256

TLP:CLEAR

ee01795618295e975dca07d025f20bbcaec559ecbcefc15dd813a3437c5bd989

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

SHA256

TLP:CLEAR

bc6e0a5693e0b6bf2997a7c93c31d2ef2c351a35fdf81a02df33ff1df7bdf784

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

SHA256

TLP:CLEAR

e96d103b7982cf988bffe33ce6eb066d25a830fb53e58da536a847ce2139d45b

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

SHA256

TLP:CLEAR

c6d9ba54fffc9c7638e04df63e0bdd7f99daecd6b7bdb347d05a30fe16d68c7d

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

SHA256

TLP:CLEAR

46c1a2426b2213b770cadb674591c8998b965273cadf1bc84ccfb5901d96e337

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

SHA256

TLP:CLEAR

316e131a04cc717d2912d371c80e016eb89cf2bb9b02eb42c2a53167422465e2

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

SHA256

TLP:CLEAR

9bb90d779fc12b6a10036b5477613d72a9da0612a677ae88843f79944d37801b

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

URL

TLP:CLEAR

http://194.32.248.126/updates/svchost.exe

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

IPV4

TLP:CLEAR

194.32.248.126

ThreatFox: Unknown malware

85% confidence

Added

2026-05-26

Domain

TLP:CLEAR

afonsoferragista.com

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

75% confidence

Added

2026-05-10

Domain

TLP:CLEAR

arquivos-omie.com

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

75% confidence

Added

2026-05-10

Domain

TLP:CLEAR

doccompartilhe.com

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

75% confidence

Added

2026-05-10

Domain

TLP:CLEAR

documentos-online.com

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

75% confidence

Added

2026-05-10

Domain

TLP:CLEAR

recebamais.com

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

75% confidence

Added

2026-05-10

Domain

TLP:CLEAR

saogeraldoshiping.com

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

75% confidence

Added

2026-05-10

Domain

TLP:CLEAR

window.navigator.chrome

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

75% confidence

Added

2026-05-10

SHA-256 Hash

TLP:CLEAR

8a174aa70a4396547045aef6c69eb0259bae1706880f4375af71085eeb537059

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

75% confidence

Added

2026-05-10

MD5 Hash

TLP:CLEAR

e0d1eedaa0c1f98f50726df729594edc

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

75% confidence

Added

2026-05-10

SHA-1 Hash

TLP:CLEAR

91fafaa1240676afe5c55d931261e3798797c408

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

75% confidence

Added

2026-05-10

SHA-1 Hash

TLP:CLEAR

94f21c140afd18b43d5a0f274216545442b3f6cd

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

75% confidence

Added

2026-05-10

SHA-256 Hash

TLP:CLEAR

63beb7372098c03baab77e0dfc8e5dca5e0a7420f382708a4df79bed2d900394

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

75% confidence

Added

2026-05-10

SHA-256 Hash

TLP:CLEAR

668f932433a24bbae89d60b24eee4a24808fc741f62c5a3043bb7c9152342f40

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

75% confidence

Added

2026-05-10