Indicators of Compromise

SHA-256 Hash

TLP:CLEAR

7a6c0b683961869fc159bf8da1b4c86bc190ee07b0ad5eb09f99deaac4db5c69

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

banshee-stealer.com

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

154.216.18.135

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

45.142.122.92

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

d556042c8a77ba52d39e211f208a27fe52f587047140d9666bbeca6032eae604

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

b2a5b16d6c36cf6f50c0fabada8ceb5d1973af2bd7f8c9194f1f19b4efb0bd4f

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

a1e36c1b872fa4b2f39ff497a6c597769044e6275e0bb1ca1c1c9ae94a32cf80

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

95b554f13d27126d04504cf35da185f572cfd6497cd86d6be0f21eb98fc4c75c

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

92791b72b06e7d1eddd796c2afed565391a451d5daee5cc5083b86477acba8db

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

03edcd7ad527fc90ea913eb76f74d12b111c1ed3a8dd6fd5f73fc2437aff3385

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

83.217.209.88

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Coockie.pro

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Downloader.go

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

AVI.Agent.bbye

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

00284601ed89be5b44d9a4219f7ee271dfd68186937b41a26c283a6a129e7a28

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

04a926b98c7d7e6b85916ef9dbb0e9068df318c399b696c04fbdfa3f0f591a21

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

11aa6eeca2547fcf807129787bec0d576de1a29b56945c5a8fb16ed8bf68f782

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

653e769b11784a71e184ae145d3ba4447e332dabccb5958508edaf96f6f80d1b

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

66eae1df6dedd0ad5dee7d6eaed8eb3e1edd93c5bb5cc54204f48506466a844a

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

7210ce47323d4bdeb99bd27b22f00099000c473a04048e2c90576f81d1194647

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

c4c249ee87fbda08834e5883f8626db1

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://:8080/installer

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

85870d9889492e3df9fbec630bbb5fde

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

ddf5c959ef9d990152d39c90b5efbfde

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

a1f06c2c83835259998f2d9d518ee2f6

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

48ac3d7ed39152844b8b3112563cfcf7

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

cdn.filestackcontent.com

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

111.90.149.111

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Install.sh

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

mactest-6b2ab-default-rtdb.firebaseio.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

wallpapermacos.com

A new Mac stealer targeting $10K+ crypto wallets

75% confidence

Added

2026-05-18

SHA-256 Hash

TLP:CLEAR

ff7f0c39aa90ed8f4ce24658a347e7871bb5f6a607eaedf2cf2859a1fb5782a9

A new Mac stealer targeting $10K+ crypto wallets

75% confidence

Added

2026-05-18

URL

TLP:CLEAR

http://wallpapermacos.com/download/

A new Mac stealer targeting $10K+ crypto wallets

75% confidence

Added

2026-05-18

Domain

TLP:CLEAR

wallspaceapp.com

A new Mac stealer targeting $10K+ crypto wallets

75% confidence

Added

2026-05-18

SHA-256 Hash

TLP:CLEAR

47373950e1d23c066de0ed2d511b4b7eea56ec22d7b501db265995fec51dbb44

A new Mac stealer targeting $10K+ crypto wallets

75% confidence

Added

2026-05-18

SHA-256 Hash

TLP:CLEAR

636fa90aebab98534dcdbe50508ed8d3607c284c72f831a4503e223540d3f761

A new Mac stealer targeting $10K+ crypto wallets

75% confidence

Added

2026-05-18

SHA-256 Hash

TLP:CLEAR

82cb3a22c90aee6cfc2f7e7f72e921e21226492c1d424d2b754b9cd763ab0b20

A new Mac stealer targeting $10K+ crypto wallets

75% confidence

Added

2026-05-18

SHA-256 Hash

TLP:CLEAR

8d029b65c1076141d4817f25428cef44888b2fb4349ab9b9df7a413d240e1177

A new Mac stealer targeting $10K+ crypto wallets

75% confidence

Added

2026-05-18

SHA-256 Hash

TLP:CLEAR

b0cd860f18b0136e063d7ef9a3c84d138a1a21dbea019605ce66a3a1fad91db4

A new Mac stealer targeting $10K+ crypto wallets

75% confidence

Added

2026-05-18

SHA-256 Hash

TLP:CLEAR

b73adc5dc04159241e4a89cbc82eaa381f406080f3aaaa1f27d145900dd54267

A new Mac stealer targeting $10K+ crypto wallets

75% confidence

Added

2026-05-18

Domain

TLP:CLEAR

coockie.pro

A new Mac stealer targeting $10K+ crypto wallets

75% confidence

Added

2026-05-18

SHA-256 Hash

TLP:CLEAR

070402c2c531aa3a87b9ccd080532a51d17b01d982b205fc4487246d58de8913

A new Mac stealer targeting $10K+ crypto wallets

75% confidence

Added

2026-05-18

SHA-256 Hash

TLP:CLEAR

4584d02b5193799453766857dba97021f966b9cbf6033d7dd3a33d61eb975a6c

A new Mac stealer targeting $10K+ crypto wallets

75% confidence

Added

2026-05-18