Indicators of Compromise

Domain

TLP:CLEAR

libraries.String

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

3.bin

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

deobfuscation.Figure

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

package.loadlibis

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

1.bin

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

2.bin

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Cleanup.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

package.loadlib

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

product.The

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

dropper.LucidRook

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

command.The

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

metadata.The

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

index.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

dropper.After

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

blob.The

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

chain.Talos

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Build.bat

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

archive.zip

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

attack.execution

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

file.Two

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

chain.The

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

archive.The

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

archive.When

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

install.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

archive4.zip

50% confidence

Added

2026-08-09

Email Address

TLP:CLEAR

crimsonanabel@powerscrews.com

50% confidence

Added

2026-08-09

Email Address

TLP:CLEAR

fexopuboriw972@gmail.com

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

index.bin

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

D.2fcc7078.digimg.store

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

archive1.zip

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

DismCore.dll

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

https://www.roblox.com.bn/games/104373565357171/Crooked-Bus?privateServerLinkCode=65924314243259842165815914766551&game_id=104373565357171&game_name=Crooked-Bus

OpenPhish: https://www.roblox.com.bn/games/104373565357171/Crooked-Bus?privateServerLinkCode=659243142432598421...

80% confidence

Added

2026-08-02

Domain

TLP:CLEAR

www.othnielbrooks.net

ThreatFox: IClickFix

85% confidence

Added

2026-08-01

Domain

TLP:CLEAR

kingsbrookofficepark.com

ThreatFox: IClickFix

85% confidence

Added

2026-07-30

Domain

TLP:CLEAR

brookbylodge.com

ThreatFox: ClearFake

65% confidence

Added

2026-07-27

Domain

TLP:CLEAR

brookscnc.com

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

brookscnc.com

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

prookasieskansanlaulun.jamesaweddingphotography.co.uk

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

prookasieskansanlaulun.jamesaweddingphotography.co.uk

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

brookslake.com

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

brooklin.avengerhomesales.net

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

brooklin.avengerhomesales.net

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

3brookes-annexera.piklamp.nl

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

3brookes-annexera.piklamp.nl

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

confinando-rookloos.godgirlapparel.com

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

confinando-rookloos.godgirlapparel.com

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

garybrookerdumyat.ubertavern.com

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

garybrookerdumyat.ubertavern.com

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

brookevi.robomowservice.com

75% confidence

Added

2026-07-26

Domain

TLP:CLEAR

brookevi.robomowservice.com

75% confidence

Added

2026-07-26