Indicators of Compromise

Domain

TLP:CLEAR

System.Text

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

DotNetProxy.RunDll

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Path.GetFileName

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

fileName.StartsWith

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

System.Net

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

System.Security

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Modulen-sws.dllNativeAOT

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

ApiEx.DatabaseBrowser

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

System.Diagnostics

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

System.IO

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Modulen-HTCommp.dllNativeAOT

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Managermhm.dll.NET

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Browserdb.dll.NET

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Moduleode.dll.NET

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Modulen-ten.dllNativeAOT

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

CvnR.png

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Cvn.cfg

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

HTCommp.dll

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Agentuxtheme.dllMixed

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

WinDirStat.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

DotNetProxy.runDll

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

IntPtr.Zero

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

CvnC.png

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

CvnA.png

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Command.Type

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

mhm.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

n-ten.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

uxtheme.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

db.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

ode.dll

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

cac.aspx

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

n-HTCommp.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

n-sws.dll

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

config.txt

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

hygienehistory.com

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

hospitalinstallation.com

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

google.com.hospitalinstallation.com

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

URL

TLP:CLEAR

https://adserviceupdate.com/cac.aspx

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

URL

TLP:CLEAR

https://hygienehistory.com/cac.aspx

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

adserviceupdate.com

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

7d586fb7f94182a8e2a0e53c7e4deb898066da029da5cd9972a94a59ca6d255a

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

8e9425c0b46eeb516610ae913d13f2b3f44a023043cb099277031d4ec38a6134

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

92cae0ad7f98f51a14bcc0ee05e372ebdc29ea96ea7bd161bd3f55198767603b

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

a4aa217def4c38f4ecacdf47b1cd687f60cc74c18ab75195be3c4357a790bf41

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

b630c96d3763182533d4fb9b614134382bd644cb02c6c1c3ade848b6ecc31e86

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

cbc9485db715e1b8cc384fe94b4cceadca4006cda8a5e28adc8848529cfafc93

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

ccf218189c3aadb1c761da14bfda3bae686769031e1e1b10007648bd72e34748

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

37e123bd7998af4eae32718ce254776f36365a80ba56952593dab46f536d4066

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

2cb1ad3b22db8e3666ea138fee88034a87a87cf43db3d3265a675ebf221379b0

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

30cb4679c4b8599eeb3d63a551716475c6332bdc4d4b4e3de0964aadb3092a10

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

75% confidence

Added

2026-07-12