Indicators of Compromise

Filename

TLP:CLEAR

trustb.zip

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

1de218e45cdf069c10d1a8735d82688b8964261a5efe3b6560e0fdcfa3c44c1d

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

keybaged.zip

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

1fbfbaefd50627796e7f16b8cc2b81ffbc5effcb33b64cc8e349e44b5d5d3ee8

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

trusted.zip

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

ce8e01373499b539f4746c0e68c850357476abe36b12834f507f9ba19af3d4f9

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

109.235.50.191

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

update.py

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

English.rtf

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

dllhost.dat

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

goopdate.dat

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

compareForfor.jpg

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

350.org

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Rinnovabili.it

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

systems.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

PowerShellInfo.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

schtask.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

schtask2.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

dump64.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

domforworld.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

OzarksFirst.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

OSX.MaMi

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

logd.zip

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

mcworker.zip

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

e0fdcb5e0215f9fae485fbfcd615c79b85806827e461bca2e1c00c82e83281dc

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Info.plist

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

flux2key.com

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

109.235.51.110

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

string2me.com

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

109.235.51.153

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

185.25.50.189

50% confidence

Added

2026-08-09