Indicators of Compromise

Filename

TLP:CLEAR

nvcontainer.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

charcode.aspx

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

evil-createdump.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

osppsvc.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

CIATosBtKbd.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

TosBtKbd.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

RuntimeBroker.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

mdync.exe

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

4264cfb3980a068ab36d842c7ee0942f40aaf308f31ed48b41e140e59885f5c8

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

d67197bf407e74ecd77be89d0da107d5f7d37c21bdf55456c6b57df65cf429b3

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

8d9433e9734dd629d74abe41ff7024c84b3a28c45671df8f4baed344de733c78

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

check.dnsmaps.com

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

microsi0ft.com

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

cert.kaspersky.icu

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

ww12.dnserver.life

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

www.group-ib.icu

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

ns1.kaspersky.icu

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

2e8f9fd8213d9f69044101cd029fd1797ec7afbcad40bb1f04eb93d881c04cd2

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

ns1.group-ib.icu

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

news.kaspersky.icu

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

ns2.kaspersky.icu

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

www.kaspersky.icu

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

time.microsofttrends.com

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

ns2.group-ib.icu

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

dns.dnserver.life

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

zimbra.life

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

7c698dd4090564b179309c2a64266424

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

c2870caa5f016822fdaf16e3c470f96eefd4b93f

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-1 Hash

TLP:CLEAR

82eb4b752c60b99b451f7a53b8ac856afe9deb88

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

MD5 Hash

TLP:CLEAR

e5e0e0c0fadacee1105bd340fa1b2e6d

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

dns.dnsmap.icu

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

erp.kaspersky.icu

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

f43748a809680a23272ec684a8cce9af071ad165c3b01acdcd7fe501a0949745

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

Domain

TLP:CLEAR

update.kaspersky.icu

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

c935ded2729f0513672e261170d73d4e0e13a9b837f104d840c44a39b84c0d71

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

d083b6d82765faffe738ebd0678c8eb01c1f1fac8d3c51ffdfe40e34da3ce902

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

b8a2a9ca58fb2b383a52f8be75cae44f08f2c3f8907bd8661ee8a4a78fd7dda3

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

a5477ff2b3d6d475558abf03878dff0cca98c20c17aae35a8ad8e99e03293f89

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

a65483b86847995a67de0fcb2a5487cdbc96361cb2e9dea8ab74005c8fef65ce

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

4f77b4fcfde7abb7e6d0e36104e433abfed3a9d9938bf7fbe0e9d1a0b2ccf265

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

41f74c3fc32752b5c7b88e7a5723441cb827958bc21b647fffae469407f1ce99

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

9dda789b85fce6294f91a79b7271a93de36dfcef21fc680dc2bf4235141e47df

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

e12c2682a7949661fa99bf46723a1405c658d109411de3bf6cb04c57337cc020

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

4173c218efe31a6b36df714cf4e1073696f3acbe7edd1b7fcba01e4a2d923a27

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

3f6382418d0137f6ecbef23bfd981938bb86a935b27203f5b053e3710e835f97

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

3dffbfcb825a70e477474e88b18679557ef467de37fc26e45ddbe572f520c52a

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

2dd93edc8cc64747a7ca94b6827dc4e5b1e385d493ed4450272dd1dfc52a6255

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

8df8282da75ebe6cf1a535739991e3f298f903974a05966503d7fd2919ecea4e

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

55e929971a7975c7f9dfa4d677d5ec357af23a4ca208ef8f920804743e9011cd

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

26f4c7f37448911310adf20e6e74aac60e92b97591f4ac9e5e21cc503be8da16

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

75% confidence

Added

2026-05-06