Indicators of Compromise

Filename

TLP:CLEAR

cl.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

ark.x64.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Tempevil.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

evil.dll

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Bandizip.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

logs.dat

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Lszeql.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Lsznxy.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Backdoor.Win32.REMCOS.UNGB

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Lszsex.vbs

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

ed7087e3afba4b320bdf04f32d3a6c567effd3d18a97682968e567000e70b335

Operation Dragon Whistle: UNG002 Targets Chinese Academia via Weaponized Institutional Lure

75% confidence

Added

2026-05-26

SHA-256 Hash

TLP:CLEAR

fe11b199ada23d5ac25efc4215e67f4ff617ccb4d429eb64412072687367ca1c

Operation Dragon Whistle: UNG002 Targets Chinese Academia via Weaponized Institutional Lure

75% confidence

Added

2026-05-26

IPv4 Address

TLP:CLEAR

60.205.186.162

Operation Dragon Whistle: UNG002 Targets Chinese Academia via Weaponized Institutional Lure

75% confidence

Added

2026-05-26

Domain

TLP:CLEAR

lysander.asia

Operation Dragon Whistle: UNG002 Targets Chinese Academia via Weaponized Institutional Lure

75% confidence

Added

2026-05-26

SHA-256 Hash

TLP:CLEAR

cd99e83d241cfbb41bfcd0bc622a87d16268e710ca7d736d0c5f44774e0056e2

Operation Dragon Whistle: UNG002 Targets Chinese Academia via Weaponized Institutional Lure

75% confidence

Added

2026-05-26

MD5 Hash

TLP:CLEAR

902533852b16b6ba322bf33de0e4215e

Operation Dragon Whistle: UNG002 Targets Chinese Academia via Weaponized Institutional Lure

75% confidence

Added

2026-05-26

SHA-256 Hash

TLP:CLEAR

eb14d9e35a3bf0a933297f861bee0be9e6b9061fe4573a81ac92b71d55b6474f

Operation Dragon Whistle: UNG002 Targets Chinese Academia via Weaponized Institutional Lure

75% confidence

Added

2026-05-26

SHA-256 Hash

TLP:CLEAR

e7aff6a55a7866776272d9913dfbf9d7db33fc9de6aced22f2a195feebb0e85f

Operation Dragon Whistle: UNG002 Targets Chinese Academia via Weaponized Institutional Lure

75% confidence

Added

2026-05-26

SHA-1 Hash

TLP:CLEAR

b5fa57a839f7d63ea8d5d00a9cd5a143777e7da9

Operation Dragon Whistle: UNG002 Targets Chinese Academia via Weaponized Institutional Lure

75% confidence

Added

2026-05-26

SHA-256 Hash

TLP:CLEAR

35a478f53f64bd412f374c65360fdba0518749537193669a8fe08d14bed65a2a

Operation Dragon Whistle: UNG002 Targets Chinese Academia via Weaponized Institutional Lure

75% confidence

Added

2026-05-26

SHA-256 Hash

TLP:CLEAR

c937eca7c4c9b98df9257d986e666d25411aac5fa39d21f7018dd2e1663f0c76

Operation Dragon Whistle: UNG002 Targets Chinese Academia via Weaponized Institutional Lure

75% confidence

Added

2026-05-26