Indicators of Compromise

Domain

TLP:CLEAR

ckAnalyser.pdb

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

1bcd8d7dc7bed5873bbdd2822e84e19773a33d659b16587ca9dc6db204447a86

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

ckAnalyzor.pdb

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

novaservice.txt

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Reddit.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

stratioai.org

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Cybersecurity.doc

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

148.251.71.182

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

PowerLessCLR.pdb

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

91.214.124.143

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Connector3.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

F.exe

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

157.20.182.75

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

dll.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Sou.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

phoenix.pdb

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

0.pdb

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

WindowsProcesses.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

WebDeepPlayer.scr

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

migavpn.store

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

orbitx.site

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

comx-view.store

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

sahar2ray.online

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

microsotf.comi-site.website

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

vip.yeplayer.store

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

www.yeplayer.store

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

miga.comesignt.website

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

starvpn.pis2ray.online

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

microsotf.come-site.website

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

yeplayer.store

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

tools.sahar2ray.online

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

download.yeplayer.store

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

URL

TLP:CLEAR

https://vip.yeplayer.store/files/YEPlayer.rar

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

IPv4 Address

TLP:CLEAR

89.144.145.239

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

SHA-1 Hash

TLP:CLEAR

4186e41a8d6ae3b316174fc601e418b8e2a664b6

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

IPv4 Address

TLP:CLEAR

45.86.162.197

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

IPv4 Address

TLP:CLEAR

46.30.191.105

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

webmail.facebook.com-accounts.website

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

comestore.site

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

SHA-1 Hash

TLP:CLEAR

c14dc6f17099a9505a2c303f204a4554a5cc219f

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

3b172281f65ceaee280ae810edb6fd39a1ecd25649f929f246c0405df94f4c89

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

MD5 Hash

TLP:CLEAR

3c1f7d9d157c38d17a44f62b6560d3b4

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

www.pis2ray.online

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

www.yemplayer.site

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

vpn.pis2ray.online

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

6c74d29903bc2cc17ec4afdb1a120d2060209b22830cee2b7005f5436e86f90e

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

www.facebook.com-accounts.website

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

www.google.com-accounts.website

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

prx.pis2ray.online

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

webmail.instagram.com-accounts.website

Iran-Nexus Disseminates MarkiRAT Surveillance Tool

75% confidence

Added

2026-07-05