Indicators of Compromise

Domain

TLP:CLEAR

Ransomware.Wins.MedusaLocker.ta

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Trojan.WIN32.Medusalocker

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Ransomware.Wins.MedusaLocker

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

u.provider

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

r.json

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

window.location.pathname

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

psexec.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

window.location.search

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

compmgmt.msc

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

u.role

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

e.stopPropagation

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

document.addEventListener

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

mobileEl.innerHTML

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

window.location.reload

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Cyberdaily.au

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

dd.style.display

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

desktopEl.innerHTML

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

d.user

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

gaze.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

filemail.com

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

netscan.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

events.Develop

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

protection.Identify

50% confidence

Added

2026-08-08

Domain

TLP:CLEAR

outbreak.Find

50% confidence

Added

2026-08-08

URL

TLP:CLEAR

http://medusainternational.com.np/wp-contents/Webmail.html

PhishTank: http://medusainternational.com.np/wp-contents/Webmail.html

90% confidence

Added

2026-08-08

Domain

TLP:CLEAR

tiejdnsadbhs.shop

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

kimsjafw.shop

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

longpih.shop

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

loveuina.shop

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

minkadsus.shop

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

newpay115.top

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

onepay114.top

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

onepay178.top

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

onepay234.top

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

onepay58.top

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

yumigdjsna.shop

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

batppp91.top

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

onepay138.top

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

onepay146.top

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

onepay1951.top

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

onepay212.top

ThreatFox: magecart

85% confidence

Added

2026-05-14

IPV4

TLP:CLEAR

80.97.160.51

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

batppp26.top

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

kihdsmas.shop

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

indaspands.shop

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

hivuwnd.shop

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

hidoslsk.shop

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

dysimasyd.shop

ThreatFox: magecart

85% confidence

Added

2026-05-14

Domain

TLP:CLEAR

batppp556.top

ThreatFox: magecart

85% confidence

Added

2026-05-14

MD5 Hash

TLP:CLEAR

9f829f7343d5d5da7c397fa6efda4a4e

Storm-1175 focuses gaze on vulnerable web-facing assets in high ...

75% confidence

Added

2026-05-06