Indicators of Compromise

Domain

TLP:CLEAR

ghazacast.com

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Venezuela.zip

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

ikhwancast.com

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

kbdus1.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

a.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

srt64.sys

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

EasySend.co

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

1.1.5.0

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

1.1.4.6

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

1.1.4.4

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

E4726173DFD0C9A6B9399269E3F31DA6

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

A26043DD720EDBF540A56B899CB36872

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

C5B9C10FFFD62F4C5A5AB9592E6F62FA

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

fr24cast.com

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

kbdus.dll

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Backdoor.Win64.Agent.kah

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

8D5F490E0A4CB4604666EA56A1B17CBD

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

4959F1EB570E5FA6E788C3C4E3324117

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Backdoor.Win64.Agent

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

myboard.twilightparadox.com

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

onetoken.ink

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

00ccbf72b8a0f0314d829766775889bbe9c964ce7b499ff26ba12fb62cadf906

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

3ec02d6bed160a97edea549ec88c46f10105f6cdf6a4b3f356b2fc6a4a14f386

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

IPv4 Address

TLP:CLEAR

159.198.32.222

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

IPv4 Address

TLP:CLEAR

159.198.75.219

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

IPv4 Address

TLP:CLEAR

69.67.173.153

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

arvax.xyz

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

grked.online

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

ndrt.ink

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

varenie.live

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

winupdate.ink

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

winupdate.live

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

myboard.chickenkiller.com

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

894332174f536c2e1efeda05cba79f8b

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

8436fba39929e8da81fc78b2bc7eb74da6b9578a

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

2654dfefff26ad290037230bf2dc7353411d0cc8

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

fd2bdd8047addee6fde2f532de181bfd

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

f5c6434ee5f7578faa3bc1257e1c9226

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

f2ab09d7e7a375a192508a5014aa2ee4

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

e2550cfad9dcc880bf04f6048f90868c

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

a0ec7a8e61eff3f445a7455b3aef9fbb

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

c019797a00fd56edb1f468ac0a598510

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

c7622a1effa27bbfee6d6e03d6474343

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

cf74ac018d158ea2c2cfa1b1d71d95bc

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

ddff82a115558584bbd7741d4ffb35b4

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

90378881856abfa47d7745c0a3ef9dc8

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

6b45ddb39a6e86229348dcbba3857e7c

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

2dfa1d949872c1b2f04952dd3e5f5d8f

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

1dba3e505491a260a44c867902c3296e

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

1096268fa2b3d454c86cf851cb782319

Armored Likho's new weapon: BusySnake Stealer

75% confidence

Added

2026-07-12