Indicators of Compromise

SHA-256 Hash

TLP:CLEAR

4351911f266eea8e62da380151a54d5c3fbbc7b08502f28d3224f689f55bffba

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

onedriveupdater.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

list.js.php

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

dee7321085737da53646b1f2d58838ece97c81e3f2319a29f7629d62395dbfd1

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

telemetry.geostatcdn.com

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

354048e6006ec9625e3e5e3056790afe018e70da916c2c1a9cb4499f83888a47

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

windows10.0-kb5009543-x64.msu

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

6.1-kb4537803.msu

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

ntos.dll

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

b855dfde7f778f99a3724802715a0baa

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

telemetry.geoinfocdn.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

geoinfocdn.com

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

3a2d0e5e4bfd6db9c45f094a638d1f1b9d07110b9f6eb8874b75d968401ad69c

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

ntuserdata.msu

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

windows10.0-kb5000736-x64.msu

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Backdoor.Win32.CotSam

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

WINWORD.EXE

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

OEMPRINT.CAT

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

applaunch.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

ace.cab

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

ace.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

ebat.bat

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

ntoskrnl.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

wmic.vbs

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

bcd2bdea2bfecd09e258b8777e3825c4a1d98af220e7b045ee7b6c30bf19d6df

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

3490ba26a75b6fb295256d077e0dbc13e4e32f9fd4e91fb35692dbf64c923c98

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

raren.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

cyfar.ca

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://allegro-lokalnie.pl-oferta4582753.lol/

PhishTank: http://allegro-lokalnie.pl-oferta4582753.lol/

90% confidence

Added

2026-08-07

Domain

TLP:CLEAR

zxzaq.com

Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

fb8ec4dbed14c0a91361abd82ebe9fb083615c3dbb15348f57317af7cc41dd34

Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

hgmydr.wiki

Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

share-ya.space

Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

3a449148a0e3cac604fb93210dd7d91ccf48e06ed9aae064bc53a419a84ce9ba

Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

6b2c02bf82087a3ca5fb7ef8046554ff29ce85d52202bdcfae2b2653aede139a

Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

8b5a4dc237a4c89042176bc89864a4c357dcdd14fa544fe6496ccb6c31cd5b7f

Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

a0c80cab70d6672b01710a70f93311fc1c1db2fbbf9cd6daa543c34b87e3444a

Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

e27d1bf82249002a66395c89dbda6ec5d8df012a84b79d36fffbbf7808d28878

Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

upgybj.store

Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days

75% confidence

Added

2026-07-24

Domain

TLP:CLEAR

xsza.net

Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days

75% confidence

Added

2026-07-24

SHA-256 Hash

TLP:CLEAR

625e4c166c7a1d5a1becf56b27d4f76a2f95935cbd8d556c30a493263d10dbf8

Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days

75% confidence

Added

2026-07-24