Indicators of Compromise

SHA-256 Hash

TLP:CLEAR

cafa8038ea7e46860c805da5c8c1aa38da070fa7d540f4b41d5e7391aa9a8079

50% confidence

Added

2026-08-09

SHA-1 Hash

TLP:CLEAR

5cacfad2bb7979d7e823a92fb936c5929081e691

50% confidence

Added

2026-08-09

SHA-1 Hash

TLP:CLEAR

76a35d4087a766e2a5a06da7e25ef76a8314ec84

50% confidence

Added

2026-08-09

SHA-1 Hash

TLP:CLEAR

29a08031c4debc7f91ca8efb40b7858c9aafc3ed

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

brokerhost.pdb

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://techzenspace.com:80/RVP/index8.php

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://:80/RVP/index3.php

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

ar.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

tmp.bin

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

ar.dat

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Webshell.DW

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Agent.AVV

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Agent.UWN

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Agent.UYS

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Agent.AVS

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Agent.AVU

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

2ac7df27bbb911f8aa52efcf67c5dc0e869fcd31ff79e86b6bd72063992ea8ad

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

ff15558085d30f38bc6fd915ab3386b59ee5bb655cbccbeb75d021fdd1fde3ac

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

index8.php

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

index3.php

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

IISpool.aspx

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

broker.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

cfg.dat

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

drvguard.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

rsc.dat

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

agent4.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

map.aspx

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

async.dat

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

inj.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

lic.dll

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

87.120.8.210

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

techzenspace.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

iispool.aspx

50% confidence

Added

2026-08-09