WatchmanHQ

Hunting: Look, don't block.

Release 20261012T180322Z · built 2026-10-12 18:03 UTC · valid until 2026-10-15 18:03 UTC

Linked to suspicious activity but not proven enough to block: a single mention, an older report, shared infrastructure, or something still waiting for validation. Search your logs for these and investigate any hit. Do not block them.

This page lists the indicators that are only on Hunting. Everything on Blocking is worth hunting for too.

5,203 indicators. Numbers in the Sources column link to the original reports.

Indicator (defanged)TypeReported asBlock scopeFirst reportedListSources
friugrime[.]comDomainListed by researchersSearch only2026-03-19HuntingHuntress [1]
gripsmonga[.]sbsDomainMalware downloadSearch only2026-03-19HuntingHuntress [1]
instance-gcfox6-relay[.]screenconnect[.]comDomainListed by researchersSearch only2026-03-19HuntingHuntress [1]
instance-sl1mb9-relay[.]screenconnect[.]comDomainListed by researchersSearch only2026-03-19HuntingHuntress [1]
instance-t5sady-relay[.]screenconnect[.]comDomainListed by researchersSearch only2026-03-19HuntingHuntress [1]
instance-vdquvd-relay[.]screenconnect[.]comDomainListed by researchersSearch only2026-03-19HuntingHuntress [1]
instance-zichgu-relay[.]screenconnect[.]comDomainListed by researchersSearch only2026-03-19HuntingHuntress [1]
jcibj[.]comDomainListed by researchersSearch only2026-03-19HuntingHuntress [1]
rpc[.]adspect[.]netDomainListed by researchersSearch only2026-03-19HuntingHuntress [1]
033f42102362a8d8d4bdba870599eb5e0c893d8fd8dd4bc2a4b446cbbeb59b99SHA-256 hashMalware fileSearch only2026-03-19HuntingHuntress [1]
0821661e715fe64bb39f4fece277737a48fd6839edd40ec8a4a39bf04cea8524SHA-256 hashMalware fileSearch only2026-03-19HuntingHuntress [1]
28278b8c85c832417f9860fe8ea3ddbb9ff1d5860317db4813227a3a52b7c7ccSHA-256 hashMalware fileSearch only2026-03-19HuntingHuntress [1]
2b409a265f571dccde6ef4860831c1b03d5418d1951f97925315dc5b0891da04SHA-256 hashMalware fileSearch only2026-03-19HuntingHuntress [1]
5abe477517f51d81061d2e69a9adebdcda80d36667d0afabe103fda4802d33dbSHA-256 hashMalware fileSearch only2026-03-19HuntingHuntress [1]
7509365935fc1bfadba20656698d3a29051031635419043bc2bc45116106e026SHA-256 hashMalware fileSearch only2026-03-19HuntingHuntress [1]
8a4033425d36cd99fe23e6faef9764fbf555f362ebdb5b72379342fbbe4c5531SHA-256 hashMalware fileSearch only2026-03-19HuntingHuntress [1]
02ce798981fb2aa68776e53672a24103579ca77a1d3e7f8aaeccf6166d1a9cc6SHA-256 hashMalware fileSearch only2026-03-19HuntingUnit 42 [1]
052d5220529b6bd4b01e5e375b5dc3ffd50c4b137e242bbfb26655fd7f475ac6SHA-256 hashMalware fileSearch only2026-03-19HuntingUnit 42 [1]
1b6326857fa635d396851a9031949cfdf6c806130767c399727d78a1c2a0126cSHA-256 hashMalware fileSearch only2026-03-19HuntingUnit 42 [1]
7c7b7b99f248662a1f9aea1563e60f90d19b0ee95934e476c423d0bf373f6493SHA-256 hashMalware fileSearch only2026-03-19HuntingUnit 42 [1]
bumptobabeco[.]topDomainCommand and controlSearch only2026-03-19HuntingElastic Security Labs [1]
instance-lh1907-relay[.]screenconnect[.]comDomainCommand and controlSearch only2026-03-19HuntingElastic Security Labs [1]
86[.]38[.]225[.]59IP addressCommand and controlSearch only2026-03-19HuntingElastic Security Labs [1]
281226ca0203537fa422b17102047dac314bc0c466ec71b2e6350d75f968f2a3SHA-256 hashMalware fileSearch only2026-03-19HuntingElastic Security Labs [1]
349e78de0fe66d1616890e835ede0d18580abe8830c549973d7df8a2a7ffdcecSHA-256 hashMalware fileSearch only2026-03-19HuntingElastic Security Labs [1]
81956d08c8efd2f0e29fd3962bcf9559c73b1591081f14a6297e226958c30d03SHA-256 hashMalware fileSearch only2026-03-19HuntingElastic Security Labs [1]
8bab731ac2f7d015b81c2002f518fff06ea751a34a711907e80e98cf70b557dbSHA-256 hashMalware fileSearch only2026-03-19HuntingElastic Security Labs [1]
adc1cf894cd35a7d7176ac5dab005bea55516bc9998d0c96223b6c0004723c37SHA-256 hashMalware fileSearch only2026-03-19HuntingElastic Security Labs [1]
c3d4361939d3f6cf2fe798fef68d4713141c48dce7dd29d3838a5d0c66aa29c7SHA-256 hashMalware fileSearch only2026-03-19HuntingElastic Security Labs [1]
hxxps://drive[.]google[.]com/uc?id=1ohZxxT-h7xWVgclB1kvpvwkF0AGWoUtq&export=downloadURLMalware downloadSearch only2026-03-19HuntingElastic Security Labs [1]
api[.]mainnet-beta[.]solana[.]comDomainMalware downloadSearch only2026-03-18HuntingBitdefender Labs [1]
js-26tik3egye4[.]i[.]zimbrasoft[.]com[.]uaDomainListed by researchersSearch only2026-03-17HuntingSeqrite [1]
js-l1wt597cimk[.]i[.]zimbrasoft[.]com[.]uaDomainListed by researchersSearch only2026-03-17HuntingSeqrite [1]
c010f64080b0b0997b362a8e6b9c618eMD5 hashMalware fileSearch only2026-03-17HuntingSeqrite [1]
157[.]20[.]182[.]75IP addressMalware downloadSearch only2026-03-16HuntingUnit 42 [1]
159[.]198[.]66[.]153IP addressCommand and controlSearch only2026-03-16HuntingUnit 42 [1]
46[.]101[.]36[.]39IP addressCommand and controlSearch only2026-03-16HuntingUnit 42 [1]
64[.]7[.]198[.]12IP addressCommand and controlSearch only2026-03-16HuntingUnit 42 [1]
0ce54a5a6f061b158e3891aadd03773d0bae220b0316e84fc042a741924b3525SHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
167d5ab70f55c100e51833fbfea44048095889c162e1330df0631423fc547409SHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
1c16b271c0c4e277eb3d1a7795d4746ce80152f04827a4f3c5798aaf4d51f6a1SHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
23f3a98befdff13c802eed32eea754018b8b525ec0dd3afce8459a0287df74ecSHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
2c92c7bf2d6574f9240032ec6adee738edddc2ba8d3207eb102eddf4ab963db0SHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
4d2958d93d4650fc4a70f70663fe6943e8c11d61b2824512da296e8fd84e5bb9SHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
4db3645f678fb519b9f529dde41f77944754f574f16a9a845c22d3703da5bed0SHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
52d8fb9a11920f27b9a3b43f27c275767a57cdffc95af94b7b66433506287314SHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
69e038b9f3a228f09059bc1ce92b1c5c49396bb70987a38df0fdb39eed380b22SHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
7ea4b307e84c8b32c0220eca13155a4cf66617241f96b8af26ce2db8115e3d53SHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
84e665a0dfbff74b4c356bfa282c7c253ae3411a8f4d58bfe121c8411c52552cSHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
b2c52fde1301a3624a9ceb995f2de4112d57fcbc6a4695799aec15af4fa0a122SHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
c3afd5ce1ca50a38438bb5026cca27bfbf2d8e786e03f323adceb8ad17517ecaSHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
f38a56b8dc0e8a581999621eef65ef497f0ac0d35e953bd94335926f00e9464fSHA-256 hashMalware fileSearch only2026-03-16HuntingUnit 42 [1]
filebulldogs[.]comDomainCommand and controlSearch only2026-03-13HuntingSeqrite [1] [2]
1d0ea66d347325902e20a12e1f2f084be45d3d6045264e513dcc420b9928013cSHA-256 hashMalware fileSearch only2026-03-13HuntingSeqrite [1]
230a22a1f1800f11718b43a7ce9390d2ef0fa9dc212d954c8fafbfbe997bbbefSHA-256 hashMalware fileSearch only2026-03-13HuntingSeqrite [1]
2671e1f43b2e5911310c5b3f124c076055eec5dee4e596854332ffcf791fd740SHA-256 hashMalware fileSearch only2026-03-13HuntingSeqrite [1]
27d7a398a58c12093bc49f7144dac2f079232768096d0558c226ea5c53782e29SHA-256 hashMalware fileSearch only2026-03-13HuntingSeqrite [1]
2902cdee050a60c3129b4bb84e74ddda7b129c3473556f689d83609d9a5981a7SHA-256 hashMalware fileSearch only2026-03-13HuntingSeqrite [1]
2dcaaedfad798dad87f27aef39885d2879825c4c8bed1dcd9e863aba0d463103SHA-256 hashMalware fileSearch only2026-03-13HuntingSeqrite [1]
31f1a97c72f596162f0946df74838d3bef89289ce630adba8791c0f3220980eeSHA-256 hashMalware fileSearch only2026-03-13HuntingSeqrite [1]
3e36b396c4cb71b8eaae2300c21bec26700b27ce5f6be83ef6b86d214e294c8bSHA-256 hashMalware fileSearch only2026-03-13HuntingSeqrite [1]
4a0e2649f89e11121ffe55546ee081ac07472db650d094314414ebf26fcb7a8eSHA-256 hashMalware fileSearch only2026-03-13HuntingSeqrite [1]
51af876b0f7fde362c69219f7dec39f7fb667fb53dc5fe2cbdf841d6c5951460SHA-256 hashMalware fileSearch only2026-03-13HuntingSeqrite [1]
62c477c0827752ffeb8ea243497eef1c666fc41025d287909d021bceb5b8e699SHA-256 hashMalware fileSearch only2026-03-13HuntingSeqrite [1]
630ac67d8db777ae0b93e066bd13b21908e79f23a41a64448f0a4ea38c063a44SHA-256 hashMalware fileSearch only2026-03-13HuntingSeqrite [1]
92962bfa6df48ec0f13713c437af021f4138dc5a419bc92bc8a376d625a6519aSHA-256 hashMalware fileSearch only2026-03-13HuntingSeqrite [1]
hxxps://filebulldogs[.]com/uploads/AVQB61TVOX/f[.]jsURLMalware downloadSearch only2026-03-13HuntingSeqrite [1]
iili[.]ioDomainListed by researchersSearch only2026-03-13HuntingLab52 [1]
pastefy[.]appDomainListed by researchersSearch only2026-03-13HuntingLab52 [1]
short-link[.]netDomainListed by researchersSearch only2026-03-13HuntingLab52 [1]
188[.]137[.]228[.]162IP addressListed by researchersSearch only2026-03-13HuntingLab52 [1]
80[.]89[.]224[.]13IP addressListed by researchersSearch only2026-03-13HuntingLab52 [1]
hxxps://iili[.]io/fphPR3b[.]jpgURLListed by researchersSearch only2026-03-13HuntingLab52 [1]
hxxps://iili[.]io/q995IQ2[.]jpgURLListed by researchersSearch only2026-03-13HuntingLab52 [1]
hxxps://iili[.]io/q995YYu[.]jpgURLListed by researchersSearch only2026-03-13HuntingLab52 [1]
hxxps://iili[.]io/q995zhl[.]jpgURLListed by researchersSearch only2026-03-13HuntingLab52 [1]
hxxps://iili[.]io/qKOFGe4[.]jpgURLListed by researchersSearch only2026-03-13HuntingLab52 [1]
hxxps://pastefy[.]app/f69UjsFE/rawURLListed by researchersSearch only2026-03-13HuntingLab52 [1]
hxxps://pastefy[.]app/nkjTcFw3/rawURLListed by researchersSearch only2026-03-13HuntingLab52 [1]
hxxps://short-link[.]net/HdviEURLListed by researchersSearch only2026-03-13HuntingLab52 [1]
hxxps://short-link[.]net/KCVTtURLListed by researchersSearch only2026-03-13HuntingLab52 [1]
hxxps://short-link[.]net/ZVMEqURLListed by researchersSearch only2026-03-13HuntingLab52 [1]
116[.]63[.]177[.]49IP addressCommand and controlSearch only2026-03-12HuntingUnit 42 [1]
118[.]194[.]238[.]51IP addressCommand and controlSearch only2026-03-12HuntingUnit 42 [1]
154[.]39[.]137[.]203IP addressCommand and controlSearch only2026-03-12HuntingUnit 42 [1]
154[.]39[.]142[.]177IP addressCommand and controlSearch only2026-03-12HuntingUnit 42 [1]
8[.]212[.]169[.]27IP addressCommand and controlSearch only2026-03-12HuntingUnit 42 [1]
8[.]220[.]135[.]151IP addressCommand and controlSearch only2026-03-12HuntingUnit 42 [1]
8[.]220[.]177[.]252IP addressCommand and controlSearch only2026-03-12HuntingUnit 42 [1]
8[.]220[.]184[.]177IP addressCommand and controlSearch only2026-03-12HuntingUnit 42 [1]
0e255b4b04f5064ff97da214050da81a823b3d99bce60cdd9ee90d913cc4a952SHA-256 hashMalware fileSearch only2026-03-12HuntingUnit 42 [1]
2ee667c0ddd4aa341adf8d85b54fbb2fce8cc14aa88967a5cb99babb08a10faeSHA-256 hashMalware fileSearch only2026-03-12HuntingUnit 42 [1]
413daa580db74a38397d09979090b291f916f0bb26a68e7e0b03b4390c1b472fSHA-256 hashMalware fileSearch only2026-03-12HuntingUnit 42 [1]
5a6ba08efcef32f5f38df544c319d1983adc35f3db64f77fa5b51b44d0e5052cSHA-256 hashMalware fileSearch only2026-03-12HuntingUnit 42 [1]
9e44a460196cc92fa6c6c8a12d74fb73a55955045733719e3966a7b8ced6c500SHA-256 hashMalware fileSearch only2026-03-12HuntingUnit 42 [1]
ad25b40315dad0bda5916854e1925c1514f8f8b94e4ee09a43375cc1e77422adSHA-256 hashMalware fileSearch only2026-03-12HuntingUnit 42 [1]
ee4d4b7340b3fa70387050cd139b43ecc65d0cfd9e3c7dcb94562f5c9c91f58fSHA-256 hashMalware fileSearch only2026-03-12HuntingUnit 42 [1]
107[.]189[.]19[.]52IP addressCommand and controlSearch only2026-03-12HuntingCheck Point Research [1]
146[.]185[.]219[.]235IP addressAttacker addressSearch only2026-03-12HuntingCheck Point Research [1]
31[.]57[.]35[.]223IP addressListed by researchersSearch only2026-03-12HuntingCheck Point Research [1]
82[.]25[.]35[.]25IP addressListed by researchersSearch only2026-03-12HuntingCheck Point Research [1]
3236facc7a30df4ba4e57fddfba41ec5MD5 hashMalware fileSearch only2026-03-12HuntingCheck Point Research [1]
3cb9dea916432ffb8784ac36d1f2d3cdMD5 hashMalware fileSearch only2026-03-12HuntingCheck Point Research [1]
3dfb151d082df7937b01e2bb6030fe4aMD5 hashMalware fileSearch only2026-03-12HuntingCheck Point Research [1]
5986ab04dd6b3d259935249741d3eff2MD5 hashMalware fileSearch only2026-03-12HuntingCheck Point Research [1]
e035c858c1969cffc1a4978b86e90a30MD5 hashMalware fileSearch only2026-03-12HuntingCheck Point Research [1]
checkpoint-vpn[.]comDomainAttacker addressSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
cisco-secure-client[.]esDomainListed by researchersSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
forticlient-for-mac[.]comDomainListed by researchersSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
forticlient-vpn[.]deDomainAttacker addressSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
forticlient-vpn[.]frDomainAttacker addressSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
forticlient-vpn[.]itDomainAttacker addressSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
forticlient[.]caDomainListed by researchersSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
forticlient[.]co[.]ukDomainListed by researchersSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
forticlient[.]noDomainListed by researchersSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
fortinet-vpn[.]comDomainAttacker addressSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
ivanti-pulsesecure[.]comDomainListed by researchersSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
ivanti-secure-access[.]deDomainListed by researchersSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
myconnection[.]proDomainCommand and controlSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
sonicwall-netextender[.]nlDomainListed by researchersSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
sophos-connect[.]orgDomainListed by researchersSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
vpn-connection[.]proDomainAttacker addressSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
watchguard-vpn[.]comDomainAttacker addressSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
26db3fd959f12a61d19d102c1a0fb5ee7ae3661fa2b301135cdb686298989179SHA-256 hashMalware fileSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
44906752f500b61d436411a121cab8d88edf614e1140a2d01474bd587a8d7ba8SHA-256 hashMalware fileSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
57a50a1c04254df3db638e75a64d5dd3b0d6a460829192277e252dc0c157a62fSHA-256 hashMalware fileSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
6129d717e4e3a6fb4681463e421a5603b640bc6173fb7ba45a41a881c79415caSHA-256 hashMalware fileSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
6c9ab17a4aff2cdf408815ec120718f19f1a31c13fc5889167065d448a40dfe6SHA-256 hashMalware fileSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
85c4837e3337165d24c6690ca63a3274dfaaa03b2ddaca7f1d18b3b169c6aac1SHA-256 hashMalware fileSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
862f004679d3b142d9d2c729e78df716aeeda0c7a87a11324742a5a8eda9b557SHA-256 hashMalware fileSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
8ebe082a4b52ad737f7ed33ccc61024c9f020fd085c7985e9c90dc2008a15adcSHA-256 hashMalware fileSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
98f21b8fa426fc79aa82e28669faac9a9c7fce9b49d75bbec7b60167e21963c9SHA-256 hashMalware fileSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
cfa4781ebfa5a8d68b233efb723dbde434ca70b2f76ff28127ecf13753bfe011SHA-256 hashMalware fileSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
eb8b81277c80eeb3c094d0a168533b07366e759a8671af8bfbe12d8bc87650c9SHA-256 hashMalware fileSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
hxxps://github[.]com/latestver/vpn/releases/download/vpn-client2/VPN-CLIENT[.]zipURLAttacker addressSearch only2026-03-12HuntingMicrosoft Threat Intelligence [1]
1d15b57db62c079fc6274f8ea02ce7ec3d6b158834b142f5345db14f16134f0dSHA-256 hashMalware fileSearch only2026-03-12HuntingHuntress [1]
e034a4c00f168134900bfe235ff2f78daf8bfcfa8b594cd2dd563d43f5de1b13SHA-256 hashMalware fileSearch only2026-03-12HuntingHuntress [1]
cyberhavenext[.]proDomainCommand and controlSearch only2026-03-12HuntingRed Canary, Sekoia [1] [2]
business[.]gogift[.]comDomainMalware downloadSearch only2026-03-11HuntingHuntress [1]
claude-code-cmd[.]squarespace[.]comDomainListed by researchersSearch only2026-03-11HuntingBitdefender Labs [1]
code[.]claude[.]aiDomainMalware downloadSearch only2026-03-11HuntingBitdefender Labs [1]
download[.]active-version[.]comDomainMalware downloadSearch only2026-03-11HuntingBitdefender Labs [1]
3b4d3a59024f14cf1f07395afd6957be05d125e00ae8fdcea3a5dee1d8ab9dd3SHA-256 hashMalware fileSearch only2026-03-11HuntingBitdefender Labs [1]
505b32ac2b6fffb5fac81d5bdc2e1e8581fc4196dfb01aee852216a3ad6ff47eSHA-256 hashMalware fileSearch only2026-03-11HuntingBitdefender Labs [1]
762fb099115d1917b6f673cc5c74a4b61962a64d640673aaf02566ca6a3dbfa4SHA-256 hashMalware fileSearch only2026-03-11HuntingBitdefender Labs [1]
79cd21185c51a5bfe2cfebdc51e14b258d91549fc0e4e09b6939c2a8a1c5ac19SHA-256 hashMalware fileSearch only2026-03-11HuntingBitdefender Labs [1]
a78e487995ab452c5990b4baff6a4fa485ae2798c2ddd13718c17eb641f11646SHA-256 hashMalware fileSearch only2026-03-11HuntingBitdefender Labs [1]
eb4d9a0e4c483dc29ae8c4d31fafcd583c457923d3344745b5c7ab13abed4dc5SHA-256 hashMalware fileSearch only2026-03-11HuntingBitdefender Labs [1]
hxxp://code[.]claude[.]ai/download/URLMalware downloadSearch only2026-03-11HuntingBitdefender Labs [1]
hxxps://download[.]active-version[.]com/claudeURLMalware downloadSearch only2026-03-11HuntingBitdefender Labs [1]
99b454262dc26b081600e844371982a49d334e5eSHA-1 hashMalware fileSearch only2026-03-10HuntingESET WeLiveSecurity [1]
d0db619a7a160949528d46d20fc0151bf9775c32SHA-1 hashMalware fileSearch only2026-03-10HuntingESET WeLiveSecurity [1]
quieresmail[.]comDomainListed by researchersSearch only2026-03-06HuntingHuntress [1]
7c00a38569a8471083b6b34e1511b9deMD5 hashMalware fileSearch only2026-03-06HuntingHuntress [1]
017[.]65c[.]mytemp[.]websiteDomainMalware downloadSearch only2026-03-06HuntingZscaler ThreatLabz [1]
arch2[.]maxdatahost1[.]cyouDomainMalware downloadSearch only2026-03-06HuntingCheck Point Research, Unit 42, Zscaler ThreatLabz [1] [2] [3]
cfgomma[.]comDomainMalware downloadSearch only2026-03-06HuntingZscaler ThreatLabz [1]
e-kflower[.]comDomainMalware downloadSearch only2026-03-06HuntingSeqrite, Zscaler ThreatLabz [1] [2]
goldman-iran-krieg[.]pages[.]devDomainMalware downloadSearch only2026-03-06HuntingZscaler ThreatLabz [1]
irandonation[.]orgDomainMalware downloadSearch only2026-03-06HuntingUnit 42, Zscaler ThreatLabz [1] [2]
khameneisol[.]xyzDomainMalware downloadSearch only2026-03-06HuntingZscaler ThreatLabz [1]
media[.]hyperfilevault2[.]momDomainListed by researchersSearch only2026-03-06HuntingUnit 42, Zscaler ThreatLabz [1] [2]
media[.]megafilehost2[.]sbsDomainListed by researchersSearch only2026-03-06HuntingUnit 42, Zscaler ThreatLabz [1] [2]
nowarwithiran[.]storeDomainMalware downloadSearch only2026-03-06HuntingZscaler ThreatLabz [1]
172[.]81[.]60[.]97IP addressCommand and controlSearch only2026-03-06HuntingSeqrite, Zscaler ThreatLabz [1] [2]
162[.]0[.]230[.]185IP addressListed by researchersSearch only2026-03-06HuntingHuntress [1]
173[.]16[.]10[.]1IP addressListed by researchersSearch only2026-03-06HuntingHuntress [1]
589ecb0bb31adc6101b9e545a4e5e07ae2e97d464b0a62242a498e613a7740b6SHA-256 hashMalware fileSearch only2026-03-06HuntingHuntress [1]
e25892603c42e34bd7ba0d8ea73be600d898cadc290e3417a82c04d6281b743bSHA-256 hashMalware fileSearch only2026-03-06HuntingHuntress [1]
107[.]148[.]130[.]22IP addressListed by researchersSearch only2026-03-06HuntingUnit 42 [1]
107[.]148[.]33[.]60IP addressListed by researchersSearch only2026-03-06HuntingUnit 42 [1]
107[.]148[.]51[.]251IP addressListed by researchersSearch only2026-03-06HuntingUnit 42 [1]
13[.]250[.]108[.]65IP addressListed by researchersSearch only2026-03-06HuntingUnit 42 [1]
43[.]255[.]189[.]67IP addressListed by researchersSearch only2026-03-06HuntingUnit 42 [1]
52[.]77[.]253[.]4IP addressListed by researchersSearch only2026-03-06HuntingUnit 42 [1]
79[.]141[.]169[.]123IP addressListed by researchersSearch only2026-03-06HuntingUnit 42 [1]
082a55731f972cd15e103104229a68175a8c59a52bae05daa8ed4302df7c2decSHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
0c7db12ec29f333bf5f53dc5c73ec446b2265fca3aad5144c3569409e15123cbSHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
0d03934eb181c2befbc5341208c4eb8f939e00382ac632216397b8210225c937SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
26483f0886078cc9f5f9912d3ffce1301e297b435920ab1c86c9107bbdce4db2SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
3b2b6a3ee023dfa168f257b292a28f5fbdbacb5aa2250e1efb36e650529db1b5SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
3e698c85660e2c012b3db7f47ca3f2b1af2b6b0e0a0d2bdb7903f91cf9d31732SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
524734501be19e9ed1bfab304b0622a2263a4f9e3db0971f3fae93f7e7369c20SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
52c817465a56ccd0fb4e914a3274a9e9a93e872583e6239bc6461e4f3e40c567SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
5c986203242e2ed25458b0606ee7be57070f6d66b7472b453d92b1b6786443bdSHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
6ddbfd3a96834087501f0c9415a925cafdb92cb8ff34685f138833b4795416d6SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
8a3345f0d8f1a7d78ea485ae11358cf2ae3d51cb7975524d6d67ba05a08a37eaSHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
8af434c2af2d901694cb27ec8639e7054f84938110a5cc4492c1bac597026d50SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
8d3907d56b1dd1609053cb55dd66f33499e1ea091133df76d8fe6f08f25f37b2SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
96f52e4666aa8df67f8d7d00a523cd25e11402108157156775603b3d9514925cSHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
99bd09e1c500866b2b809fd9170f1b8b7e120da21a1f2eed6165fcf81bf519b7SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
b87cee18720c176c1972cf5c74e3c09877177e0c49c34a04b910bb3c70839b71SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
cdb90179188a142d24147edcb72be8b574fac4f6833fff15a6ee803754dec0c0SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
ce20c033dcadf17d9cca325869f946efdd82ab0756fa56e262b6f573252d457cSHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
cfcbb3014ecc560ba36103213b36fc62d6b0ef22c49067ff0d860fd7253a7c94SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
cfdcbc553bc7464aedfb6758b0a38acc78d9537eabe9717e60ab0d8d3b355225SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
d8378cf105146217e6ded438187c4ea0edcadb6cf27f5eeddda3fd80cce76d72SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
e1ff808321ce952384b7fff720584c48ec0fd36480d6bc9ac0d5db036102c368SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
e9541e8afa502e13c18734756270b10e3c07f1071283387e63c8f8b0ba591343SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
edc0287da3c6bb62a7b2fd3949be5688628fc0e893b5822bd5734a63c39f7ab1SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
f6ac9e5e76bc9daf4772c5be43c9eac1d2611caafd49fac70bbb8eebfa4781acSHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
f710dc61c2edc85841fd733a17b7977dfb889d6476c59bb3c54a5b2fd393ac13SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
f7c73b1ac9aff545b184ec7121f2bc706c5064dc3c17f59e9a39469031bf2ef6SHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
fb9400d763a009b3bd2b9468410e0c69ee8a4f58400e532f086cef749422210dSHA-256 hashMalware fileSearch only2026-03-06HuntingUnit 42 [1]
astro[.]thorousha[.]ruDomainListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
backend[.]vmfuiojitnlb[.]esDomainListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
branch[.]cricomai[.]sa[.]comDomainListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
immutable[.]nathacha[.]digitalDomainListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
kzagniw[.]esDomainListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
mock[.]zuyistoo[.]todayDomainListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
mysql[.]vecedoo[.]onlineDomainListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
piwf[.]ariitdc[.]esDomainListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
q9y3[.]efwzxgd[.]esDomainListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
qonnfp[.]wnrathttb[.]ruDomainListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
hxxps://astro[.]thorousha[.]ru/vojd4e50fw4o!g/$ENCODEDURLListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
hxxps://backend[.]vmfuiojitnlb[.]es/CGyP9!CbhSU22YT2/URLListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
hxxps://branch[.]cricomai[.]sa[.]com/b@GrBOPttIrJA/*EMAIL_ADDRESSURLListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
hxxps://immutable[.]nathacha[.]digital/T@uWhi6jqZQH7/#?EMAIL_ADDRESSURLListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
hxxps://kzagniw[.]es/LI6vGlx7@1wPztdyURLListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
hxxps://mock[.]zuyistoo[.]today/pry1r75TisN5S@8yDDQI/$EMAIL_ADDRESSURLListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
hxxps://mysql[.]vecedoo[.]online/JB5ow79@fKst02/#EMAIL_ADDRESSURLListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
hxxps://piwf[.]ariitdc[.]es/kv2gVMHLZ@dNeXt/$EMAIL_ADDRESSURLListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
hxxps://q9y3[.]efwzxgd[.]es/MEaap8nZG5A@c8T/*EMAIL_ADDRESSURLListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
hxxps://qonnfp[.]wnrathttb[.]ru/Fe2yiyoKvg3YTfV!/$EMAIL_ADDRESSURLListed by researchersSearch only2026-03-04HuntingMicrosoft Threat Intelligence [1]
serverconect[.]ccDomainMalware downloadSearch only2026-03-04HuntingHuntress [1]
121[.]127[.]33[.]212IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
144[.]31[.]123[.]157IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
144[.]31[.]139[.]201IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
144[.]31[.]139[.]203IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
144[.]31[.]204[.]136IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
144[.]31[.]204[.]145IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
147[.]45[.]197[.]92IP addressListed by researchersSearch only2026-03-04HuntingHuntress, Zscaler ThreatLabz [1] [2]
172[.]245[.]112[.]202IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
185[.]196[.]9[.]98IP addressMalware downloadSearch only2026-03-04HuntingHuntress [1]
193[.]143[.]1[.]155IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
193[.]143[.]1[.]160IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
193[.]23[.]211[.]29IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
194[.]28[.]225[.]230IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
206[.]245[.]157[.]177IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
64[.]188[.]70[.]194IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
77[.]239[.]120[.]249IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
77[.]239[.]121[.]3IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
84[.]201[.]4[.]120IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
87[.]251[.]87[.]137IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
93[.]185[.]159[.]90IP addressListed by researchersSearch only2026-03-04HuntingHuntress [1]
94[.]228[.]161[.]88IP addressListed by researchersSearch only2026-03-04HuntingHuntress, Zscaler ThreatLabz [1] [2]
40fc240febf2441d58a7e2554e4590e172bfefd289a5d9fa6781de38e266b378SHA-256 hashMalware fileSearch only2026-03-04HuntingHuntress [1]
518ff5fbfa4296abf38dfc342107f70e1491a7460978da6315a75175fb70e2b3SHA-256 hashMalware fileSearch only2026-03-04HuntingHuntress [1]
a22ddb3083b62dae7f2c8e1e86548fc71b63b7652b556e50704b5c8908740ed5SHA-256 hashMalware fileSearch only2026-03-04HuntingHuntress [1]
d5dffba463beae207aee339f88a18cfcd2ea2cd3e36e98d27297d819a1809846SHA-256 hashMalware fileSearch only2026-03-04HuntingHuntress [1]
e13d9304f7ebdab13f6cb6fae3dff3a007c87fed59b0e06ebad3ecfebf18b9fdSHA-256 hashMalware fileSearch only2026-03-04HuntingHuntress [1]
f03e38e1c39ac52179e43107cf7511b9407edf83c008562250f5f340523b4b51SHA-256 hashMalware fileSearch only2026-03-04HuntingHuntress [1]
fd67063ffb0bcde44dca5fea09cc0913150161d7cb13cffc2a001a0894f12690SHA-256 hashMalware fileSearch only2026-03-04HuntingHuntress [1]
ampolice[.]orgDomainCommand and controlSearch only2026-03-03HuntingCheck Point Research [1]
bigflx[.]netDomainCommand and controlSearch only2026-03-03HuntingCheck Point Research [1]
copilot-cloud[.]netDomainCommand and controlSearch only2026-03-03HuntingCheck Point Research [1]
drivefrontend[.]pa-clients[.]workers[.]devDomainCommand and controlSearch only2026-03-03HuntingCheck Point Research [1]
exchange4study[.]comDomainCommand and controlSearch only2026-03-03HuntingCheck Point Research [1]
mindssurpass[.]comDomainCommand and controlSearch only2026-03-03HuntingCheck Point Research [1]
ns1[.]onedriveconsole[.]comDomainMalware downloadSearch only2026-03-03HuntingCheck Point Research [1]
oicm[.]orgDomainCommand and controlSearch only2026-03-03HuntingCheck Point Research [1]
onedriveconsole[.]comDomainCommand and controlSearch only2026-03-03HuntingCheck Point Research [1]
protacik[.]comDomainCommand and controlSearch only2026-03-03HuntingCheck Point Research [1]
revitpourtous[.]comDomainCommand and controlSearch only2026-03-03HuntingCheck Point Research [1]
splunkds[.]comDomainCommand and controlSearch only2026-03-03HuntingCheck Point Research [1]
wikipedla[.]blogDomainCommand and controlSearch only2026-03-03HuntingCheck Point Research [1]
zhydromet[.]comDomainCommand and controlSearch only2026-03-03HuntingCheck Point Research [1]
166e777cb72a7c4e126f8ed97e0a82e7ca9e87df7793fea811daf34e1e7e47a6SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
16b9a7358be88632378ba20ba1430786f3b844694b1f876211ecdbecf5cccbc2SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
19139a525ee9c22efd6a4842c4cd50ab2c5f9ee391e5531071df0bb4e685f55dSHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
2f787c1454891b242ab221b8b8b420373c3eb1a0c1fdcb624dd800c50758bbb0SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
3128bdb8efaaa04c0ba96337252f4cc2dc795021cbc410f74ace9dde958bac1dSHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
37b485ed8d150d022c41e5e307b8c54c34ef806625b44d0c940b18be7d5b29ceSHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
3a2df7a2cfeca5ba315a29cf313268a53a22316c925e6b9760ead8f4df0d1f75SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
3e2a0bafbd44e24b17fd7b17c9f2b2a3727349971d42612d55bbc1732082619aSHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
43f8f94ca5aa0af7bfb0cc1d2f664a46500a161b2d082b48b516d084ef485348SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
44e769efed3e4f9f04c52dcd13f15cead251a1a08827a2cb6ea68427522c7fbbSHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
4f93be0c46a53701b1777ab8df874c837df3d8256e026f138d60fc2932e569a8SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
51684a0e356513486489986f5832c948107ff687c8501d64846cdc4307429413SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
5341c7256542405abdd01ee288b08e49dcb6d1782be6b7bea63b459d80f9a8f5SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
568c67564d62b09d1a1bc29a494cf4bf31afddcafcf78592b178c63f23ccfcaeSHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
5ad857df8976523cb3ad2fdf30e87c0e7daa64135716b139ffdcd209b98e1654SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
72e4b6540e32b8b7aac850055609bc5afc19e29834e9aa6be29a8ea59a2c9785SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
7384462d420bdc9683a4cac2a8ad19353a2aa7d2244c91e9182345777e811e33SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
740a09fcdefa5a5f79355b720f54ff09efa64062229fb388adbccd9c829e9ff0SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
74a11a07d167f8f5c0baa724d1f7708985c81d0ac3d0e4d7ef3f3220c335e009SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
7f89a4d5af47bc00a9ad58f0bcbe8a7be2662953dcd03f0e881cc5cbf6b7bca8SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
85a03d2e74ae84093a74699057693d11e5c61f85b62e741778cbc5fc9f89022fSHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
8c29f9189a9ad75a959024f59e68c62d42a6fd42f9eacf847128c7efe4ef7578SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
948468aba5c851952ebe56a5bf37904ed83a6c8cb520304db6938d79892f0a1bSHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
967b5c611d304385807ea2d865fa561c15cde0473dd63e768679a4f29f0e4563SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
a6b5448ba45f3f352f5f4c5376024891adda1ef8ebf62a8fe63424fa230c691dSHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
b93560c4d18120e113fb8b04a8aa05f66a12116d1fbf18a93186f6314381e97eSHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
bcbe2f0a8134c0e7fce18d0394ababc1d910e6f7b77b8c07643434cd14f4c5d6SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
bd699ed720e2bd7085b3444cb8f4d36870b5b48df1055ec6cc1553db3eef7fafSHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
c4de1f1a8cb3b0392802ee56096ddb25b6f51c51350ce7c45e14d8c285765300SHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
ddaca57f3d5f4986da052ca172631b351410d6f5831f6af351699c6201cc011bSHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
e3b016f2fc865d0f53f635f740eb0203626517425ed9a2908058f96a3bcf470dSHA-256 hashMalware fileSearch only2026-03-03HuntingCheck Point Research [1]
1win[.]fyiDomainMalware downloadSearch only2026-03-03HuntingUnit 42 [1]
1winofficialsite[.]inDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
buy[.]stripe[.]comDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
cblanke2[.]pages[.]devDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
dylansparks[.]comDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
ericwbailey[.]websiteDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
leroibear[.]comDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
myshantispa[.]comDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
paypal[.]meDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
perceptivepumpkin[.]comDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
reviewerpress[.]comDomainMalware downloadSearch only2026-03-03HuntingUnit 42 [1]
reviewerpressus[.]mycartpanda[.]comDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
runners-daily-blog[.]comDomainListed by researchersSearch only2026-03-03HuntingUnit 42, Zscaler ThreatLabz [1] [2]
shiftypumpkin[.]comDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
splintered[.]co[.]ukDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
storage3d[.]comDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
trinca[.]tornidor[.]comDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
turnedninja[.]comDomainListed by researchersSearch only2026-03-03HuntingUnit 42 [1]
hxxps://reviewerpress[.]com/advertorial-maxvision-can/?lang=enURLMalware downloadSearch only2026-03-03HuntingUnit 42 [1]
hxxps://meetingapp[.]site/webexdownloadURLMalware downloadSearch only2026-03-02HuntingZscaler ThreatLabz [1]
afzarkara[.]comDomainListed by researchersSearch only2026-03-02HuntingHuntress [1]
agricularly[.]comDomainListed by researchersSearch only2026-03-02HuntingHuntress [1]
alatastro[.]comDomainListed by researchersSearch only2026-03-02HuntingHuntress [1]
arcupondepago[.]comDomainListed by researchersSearch only2026-03-02HuntingHuntress [1]
bongsebing[.]comDomainListed by researchersSearch only2026-03-02HuntingHuntress [1]
egravy[.]comDomainListed by researchersSearch only2026-03-02HuntingHuntress [1]
0dce1175dc50d20da0fc009d0eed30fb75a004389fca0fbe0abe9835631d745cSHA-256 hashMalware fileSearch only2026-03-02HuntingHuntress [1]
1175b1c56d59b736fe25495674ee3f83848e7785fde8ba9e207d283fed9b36c7SHA-256 hashMalware fileSearch only2026-03-02HuntingHuntress [1]
388c53e8ff438f0cf101fe0322ad8f32bae140ff85da9b71b0fa366a76097408SHA-256 hashMalware fileSearch only2026-03-02HuntingHuntress [1]
59014e97287b5602bba192a04535c59c60c6eb3a9770a94293551dfd5390c5c2SHA-256 hashMalware fileSearch only2026-03-02HuntingHuntress [1]
64ec615c046a59c08f0ddf3fe9f93e0c9e1bed227d980628cc09600e94adcd25SHA-256 hashMalware fileSearch only2026-03-02HuntingHuntress [1]
6fbd98bbdb8a34dd563f29f45c66adf5c53b1aff225269af3ceb56d76ecd677dSHA-256 hashMalware fileSearch only2026-03-02HuntingHuntress [1]
e30b3f4979b63b50438d061858c9cde962f4494e585c627a11c98b6c5b7b2592SHA-256 hashMalware fileSearch only2026-03-02HuntingHuntress [1]
sevrrhst[.]comDomainCommand and controlSearch only2026-03-01HuntingDarktrace [1]
stomcs[.]comDomainListed by researchersSearch only2026-03-01HuntingDarktrace [1]
techcross-es[.]comDomainListed by researchersSearch only2026-03-01HuntingDarktrace [1]
88[.]119[.]171[.]59IP addressListed by researchersSearch only2026-03-01HuntingDarktrace [1]
319d905b83bf9856b84340493c828a0cMD5 hashMalware fileSearch only2026-03-01HuntingDarktrace [1]
94b7392133935d2034b8169b9ce50764MD5 hashMalware fileSearch only2026-03-01HuntingDarktrace [1]
d3539d71a12fe640f3af8d6fb4c680fdMD5 hashMalware fileSearch only2026-03-01HuntingDarktrace [1]
hxxps://stomcs[.]com/inc/register[.]php?req=nextURLListed by researchersSearch only2026-03-01HuntingDarktrace [1]
avg[.]domaininfo[.]topDomainCommand and controlSearch only2026-02-28HuntingDarktrace [1]
104[.]234[.]174[.]5IP addressCommand and controlSearch only2026-02-28HuntingDarktrace [1]
134[.]122[.]13[.]34IP addressCommand and controlSearch only2026-02-28HuntingDarktrace [1]
195[.]154[.]119[.]194IP addressCommand and controlSearch only2026-02-28HuntingDarktrace [1]
217[.]76[.]57[.]78IP addressCommand and controlSearch only2026-02-28HuntingDarktrace [1]
28df16894a6732919c650cc5a3de94e434a81d80SHA-1 hashMalware fileSearch only2026-02-28HuntingDarktrace [1]
35da45aeca4701764eb49185b11ef23432f7162aSHA-1 hashMalware fileSearch only2026-02-28HuntingDarktrace [1]
b6a15e1f2f3e1f651a5ad4a18ce39d411d385ac7SHA-1 hashMalware fileSearch only2026-02-28HuntingDarktrace [1]
hxxp://134[.]122[.]13[.]34:8979/cURLMalware downloadSearch only2026-02-28HuntingDarktrace [1]
hxxp://195[.]154[.]119[.]194/index[.]jsURLMalware downloadSearch only2026-02-28HuntingDarktrace [1]
hxxp://217[.]76[.]57[.]78:8009/index[.]jsURLMalware downloadSearch only2026-02-28HuntingDarktrace [1]
hyfnrsx1[.]comDomainPhishingSearch only2026-02-26HuntingInfoblox Threat Intel [1]
publicnoticessites[.]comDomainPhishingSearch only2026-02-26HuntingInfoblox Threat Intel [1]
www[.]hightkdhe[.]storeDomainMalware downloadSearch only2026-02-26HuntingZscaler ThreatLabz [1]
www[.]homeatedke[.]storeDomainMalware downloadSearch only2026-02-26HuntingZscaler ThreatLabz [1]
www[.]philion[.]storeDomainMalware downloadSearch only2026-02-26HuntingZscaler ThreatLabz [1]
hxxps://www[.]hightkdhe[.]store/star/main[.]phpURLMalware downloadSearch only2026-02-26HuntingZscaler ThreatLabz [1]
hxxps://www[.]homeatedke[.]store/star/main[.]phpURLMalware downloadSearch only2026-02-26HuntingZscaler ThreatLabz [1]
hxxps://www[.]philion[.]store/star/main[.]phpURLMalware downloadSearch only2026-02-26HuntingZscaler ThreatLabz [1]
decoorat[.]netDomainCommand and controlSearch only2026-02-26HuntingLab52 [1]
decoraat[.]netDomainCommand and controlSearch only2026-02-26HuntingLab52 [1]
onedow[.]gesecole[.]netDomainMalware downloadSearch only2026-02-26HuntingLab52 [1]
onedown[.]gesecole[.]netDomainMalware downloadSearch only2026-02-26HuntingLab52 [1]
d293ded5a63679b81556d2c622c78be6253f500b6751d4eeb271e6500a23b21eSHA-256 hashMalware fileSearch only2026-02-26HuntingLab52 [1]
hxxps://onedow[.]gesecole[.]net/downloadURLMalware downloadSearch only2026-02-26HuntingLab52 [1]
hxxps://onedown[.]gesecole[.]net/downloadURLMalware downloadSearch only2026-02-26HuntingLab52 [1]
pharmacynod[.]comDomainCommand and controlSearch only2026-02-23HuntingCheck Point Research [1]
signup-forms[.]theonlycompany[.]comDomainPhishingSearch only2026-02-23HuntingCheck Point Research [1]
262a1003a2cd04993b29e687686eba573d6202fea8611c437ecbd6312802677aSHA-256 hashMalware fileSearch only2026-02-23HuntingCheck Point Research [1]
6eb7dbf27a25639c7f11c05fd88ea2a301e0ca93d3c3bdee1eb5917fc60a56ffSHA-256 hashMalware fileSearch only2026-02-23HuntingCheck Point Research [1]
hxxps://pharmacynod[.]com/join/join[.]htmlURLCommand and controlSearch only2026-02-23HuntingCheck Point Research [1]
166[.]62[.]100[.]52IP addressCommand and controlSearch only2026-02-23HuntingThe DFIR Report [1]
166[.]62[.]100[.]62IP addressCommand and controlSearch only2026-02-23HuntingThe DFIR Report [1]
722fff8f38197d1449df500ae31a95bb34a6ddaba56834b13eaaff2b0f9f1c8bSHA-256 hashMalware fileSearch only2026-02-23HuntingThe DFIR Report [1]
87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55SHA-256 hashMalware fileSearch only2026-02-23HuntingThe DFIR Report [1]
8ceee89550c521ba43f59d24ba53a22a3b69ead0fce118508d0a87a383d6a7b6SHA-256 hashMalware fileSearch only2026-02-23HuntingThe DFIR Report [1]
c8646cfb574ff2c6f183c3c3951bf6b2c6cf16ff8a5e949a118be27f15962faeSHA-256 hashMalware fileSearch only2026-02-23HuntingThe DFIR Report [1]
d9c888bde81f19f3dc4f050d184ffa6470f1a93a2b3b10b3cc2d246574f56841SHA-256 hashMalware fileSearch only2026-02-23HuntingThe DFIR Report [1]
d15mawx0xveem1[.]cloudfront[.]netDomainCommand and controlSearch only2026-02-20HuntingElastic Security Labs [1]
www[.]investonline[.]inDomainCompromised siteSearch only2026-02-20HuntingElastic Security Labs [1]
055336daf2ac9d5bbc329fd52bb539085d00e2302fa75a0c7e9d52f540b28bebSHA-256 hashMalware fileSearch only2026-02-20HuntingElastic Security Labs [1]
5e0a30d8d91d5fd46da73f3e6555936233d870ac789ca7dd64c9d3cc74719f51SHA-256 hashMalware fileSearch only2026-02-20HuntingElastic Security Labs [1]
a508d0bb583dc6e5f97b6094f8f910b5b6f2b9d5528c04e4dee62c343fce6f4bSHA-256 hashMalware fileSearch only2026-02-20HuntingElastic Security Labs [1]
bcc7a0e53ebc62c77b7b6e3585166bfd7164f65a8115e7c8bda568279ab4f6f1SHA-256 hashMalware fileSearch only2026-02-20HuntingElastic Security Labs [1]
hxxps://www[.]investonline[.]in/js/jq[.]phpURLCompromised siteSearch only2026-02-20HuntingElastic Security Labs [1]
m-mgarg[.]comDomainPhishingSearch only2026-02-19HuntingESET WeLiveSecurity [1]
mgardownload[.]comDomainMalware downloadSearch only2026-02-19HuntingESET WeLiveSecurity [1]
mgarg[.]comDomainMalware downloadSearch only2026-02-19HuntingESET WeLiveSecurity [1]
54[.]67[.]2[.]84IP addressCommand and controlSearch only2026-02-19HuntingESET WeLiveSecurity [1]
api[.]skycloudcenter[.]comDomainCommand and controlSearch only2026-02-18HuntingElastic Security Labs [1]
marle[.]ioDomainCommand and controlSearch only2026-02-16HuntingHuntress [1]
www[.]ndibstersoft[.]comDomainCommand and controlSearch only2026-02-16HuntingElastic Security Labs, Huntress [1] [2]
192[.]121[.]23[.]146IP addressMalware downloadSearch only2026-02-16HuntingHuntress [1]
03c624d251e9143e1c8d90ba9b7fa1f2c5dc041507fd0955bdd4048a0967a829SHA-256 hashMalware fileSearch only2026-02-16HuntingHuntress [1]
68858d3cbc9b8abaed14e85fc9825bc4fffc54e8f36e96ddda09e853a47e3e31SHA-256 hashMalware fileSearch only2026-02-16HuntingHuntress [1]
6ffae128e0dbf14c00e35d9ca17c9d6c81743d1fc5f8dd4272a03c66ecc1ad1fSHA-256 hashMalware fileSearch only2026-02-16HuntingHuntress [1]
8e54cd12591d67dfbe72e94c1bde6059e1cba157e6786aec63f8f9e3c71fb925SHA-256 hashMalware fileSearch only2026-02-16HuntingHuntress [1]
c31c8edbf94c85cc9bc46a5665c45a3556c48d5ad615c0a44e14e5406d80df12SHA-256 hashMalware fileSearch only2026-02-16HuntingHuntress [1]
de81e2155d797ff729ed3112fd271aa2728e75fc71b023d0d9bb0f62663f33b3SHA-256 hashMalware fileSearch only2026-02-16HuntingHuntress [1]
ea378496135318ac5ad667a032fa4a9686add9d27fe4a7c549c937611b5099e5SHA-256 hashMalware fileSearch only2026-02-16HuntingHuntress [1]
eecc83add16f3d513a9701e9a646b1885014229ac6f86addd6b10afb64d1d2afSHA-256 hashMalware fileSearch only2026-02-16HuntingHuntress [1]
hxxps://marle[.]io/check/updprofile[.]aspxURLCommand and controlSearch only2026-02-16HuntingHuntress [1]
5486107244ecaa3a0824895fa432827cc12df69620ca94aaa4ad75f39ac79588SHA-256 hashMalware fileSearch only2026-02-13HuntingLab52 [1]
58cfb8b9fee1caa94813c259901dc1baa96bae7d30d79b79a7d441d0ee4e577eSHA-256 hashMalware fileSearch only2026-02-13HuntingLab52 [1]
9097d9cf5e6659e869bf2edf766741b687e3d8570036d853c0ca59ae72f9e9fcSHA-256 hashMalware fileSearch only2026-02-13HuntingLab52 [1]
b0f9f0a34ccab1337fbcca24b4f894de8d6d3a6f5db2e0463e2320215e4262e4SHA-256 hashMalware fileSearch only2026-02-13HuntingLab52 [1]
c3b617e0c6b8f01cf628a2b3db40e8d06ef20a3c71365ccc1799787119246010SHA-256 hashMalware fileSearch only2026-02-13HuntingLab52 [1]
df60fa6008b1a0b79c394b42d3ada6bab18b798f3c2ca1530a3e0cb4fbbbe9f6SHA-256 hashMalware fileSearch only2026-02-13HuntingLab52 [1]
ed8f20bbab18b39a67e4db9a03090e5af8dc8ec24fe1ddf3521b3f340a8318c1SHA-256 hashMalware fileSearch only2026-02-13HuntingLab52 [1]
hxxp://webhook[.]site/62114596-33f5-47fb-9012-0223529e5a13/docopened[.]jpgURLListed by researchersSearch only2026-02-13HuntingLab52 [1]
hxxp://webhook[.]site/68d68fc7-aa94-4f2d-a727-d18fb40b0d69/docopened[.]jpgURLListed by researchersSearch only2026-02-13HuntingLab52 [1]
hxxp://webhook[.]site/c29905ab-e5fa-446c-8958-4eab15d8fb80/docopened[.]jpgURLListed by researchersSearch only2026-02-13HuntingLab52 [1]
hxxp://webhook[.]site/c2e1be16-401b-4f60-8a0f-276b30417fda/docopened[.]jpgURLListed by researchersSearch only2026-02-13HuntingLab52 [1]
hxxp://webhook[.]site/d63049e3-1cbe-474b-9005-237517af53a7/docopened[.]jpgURLListed by researchersSearch only2026-02-13HuntingLab52 [1]
hxxps://webhook[.]site/4e6cf717-e4d6-4f40-9f2d-134196fa5e7dURLListed by researchersSearch only2026-02-13HuntingLab52 [1]
hxxps://webhook[.]site/5744c020-a8d9-4755-abfb-cde6ccd450afURLListed by researchersSearch only2026-02-13HuntingLab52 [1]
hxxps://webhook[.]site/5dbed3be-f1c9-41e5-b5d5-e961d08b5fbaURLListed by researchersSearch only2026-02-13HuntingLab52 [1]
hxxps://webhook[.]site/a3f4e990-0b2a-4f6a-a02e-c573005de3eeURLListed by researchersSearch only2026-02-13HuntingLab52 [1]
hxxps://webhook[.]site/a72d8905-b15f-4e95-9a8f-5e4bb7dc9b3dURLListed by researchersSearch only2026-02-13HuntingLab52 [1]
dronemaker[.]orgDomainCommand and controlSearch only2026-02-11HuntingHuntress [1]
microuptime[.]comDomainListed by researchersSearch only2026-02-11HuntingHuntress [1]
networklookout[.]comDomainMalware downloadSearch only2026-02-11HuntingHuntress [1]
telesupportgroup[.]comDomainListed by researchersSearch only2026-02-11HuntingHuntress [1]
160[.]191[.]182[.]41IP addressMalware downloadSearch only2026-02-11HuntingHuntress [1]
192[.]144[.]34[.]35IP addressCommand and controlSearch only2026-02-11HuntingHuntress [1]
192[.]144[.]34[.]42IP addressCommand and controlSearch only2026-02-11HuntingHuntress [1]
0b7801af15b6d13b242e8ec53e365b42e2b37edc0fd3e182c94b7d64814d0993SHA-256 hashMalware fileSearch only2026-02-11HuntingHuntress [1]
0d332b4f5dc9c98097ccbda31847b85c1780c1a02764db3adcbaf67158fbffd0SHA-256 hashMalware fileSearch only2026-02-11HuntingHuntress [1]
aadf879d5a37de295e6a331aaa38fd138c50317761d6bb97f91d2f354790434eSHA-256 hashMalware fileSearch only2026-02-11HuntingHuntress [1]
b21f3a77031bccc6f7feb03916a6734e6823328786f993457503c5960b67922bSHA-256 hashMalware fileSearch only2026-02-11HuntingHuntress [1]
hxxp://160[.]191[.]182[.]41/access/URLMalware downloadSearch only2026-02-11HuntingHuntress [1]
itch[.]ioDomainMalware downloadSearch only2026-02-11HuntingBitdefender Labs [1]
45[.]221[.]64[.]224IP addressMalware downloadSearch only2026-02-11HuntingBitdefender Labs [1]
hxxp://45[.]221[.]64[.]224/12[.]d|iexURLMalware downloadSearch only2026-02-11HuntingBitdefender Labs [1]
jbtz003[.]comDomainListed by researchersSearch only2026-02-11HuntingElastic Security Labs [1]
tz123[.]appDomainListed by researchersSearch only2026-02-11HuntingElastic Security Labs [1]
tz789[.]appDomainCommand and controlSearch only2026-02-11HuntingElastic Security Labs [1]
uupbit[.]topDomainMalware downloadSearch only2026-02-11HuntingElastic Security Labs [1]
1e4b23eee1b96b0cc705da1e7fb9e2f3MD5 hashMalware fileSearch only2026-02-11HuntingElastic Security Labs [1]
055bdcaa0b69a1e205c931547ef863531e9fdfdaac93aaea29fb701c7b468294SHA-256 hashMalware fileSearch only2026-02-11HuntingElastic Security Labs [1]
1b723a5f9725b607926e925d1797f7ec9664bb308c9602002345485e18085b72SHA-256 hashMalware fileSearch only2026-02-11HuntingElastic Security Labs [1]
1f9e694cac70d089f549d7adf91513f0f7e1d4ef212979aad67a5aea10c6d016SHA-256 hashMalware fileSearch only2026-02-11HuntingElastic Security Labs [1]
2340f152e8cb4cc7d5d15f384517d756a098283aef239f8cbfe3d91f8722800aSHA-256 hashMalware fileSearch only2026-02-11HuntingElastic Security Labs [1]
7f2987e49211ff265378349ea648498042cd0817e131da41156d4eafee4310caSHA-256 hashMalware fileSearch only2026-02-11HuntingElastic Security Labs [1]
c2ff48cfa38598ad514466673b506e377839d25d5dfb1c3d88908c231112d1b2SHA-256 hashMalware fileSearch only2026-02-11HuntingElastic Security Labs [1]
c5abe6936fe111bbded1757a90c934a9e18d849edd70e56a451c1547688ff96fSHA-256 hashMalware fileSearch only2026-02-11HuntingElastic Security Labs [1]
hxxp://tz789[.]app/brfmljs[.]txtURLCommand and controlSearch only2026-02-11HuntingElastic Security Labs [1]
auth[.]qgtxtebl[.]workers[.]devDomainCommand and controlSearch only2026-02-08HuntingHuntress [1]
files[.]catbox[.]moeDomainListed by researchersSearch only2026-02-08HuntingElastic Security Labs, Huntress [1] [2]
v2-api[.]mooo[.]comDomainCommand and controlSearch only2026-02-08HuntingHuntress [1]
vdfccjpnedujhrzscjtq[.]supabase[.]coDomainListed by researchersSearch only2026-02-08HuntingElastic Security Labs, Huntress [1] [2]
34b2a6c334813adb2cc70f5bd666c4afbdc4a6d8a58cc1c7a902b13bbd2381f4SHA-256 hashMalware fileSearch only2026-02-08HuntingHuntress [1]
46831be6e577e3120084ee992168cca5af2047d4a08e3fd67ecd90396393b751SHA-256 hashMalware fileSearch only2026-02-08HuntingHuntress [1]
897eae49e6c32de3f4bfa229ad4f2d6e56bcf7a39c6c962d02e5c85cd538a189SHA-256 hashMalware fileSearch only2026-02-08HuntingHuntress [1]
bbd6e120bf55309141f75c85cc94455b1337a1a4333f6868b245b2edfa97ef44SHA-256 hashMalware fileSearch only2026-02-08HuntingHuntress [1]
hxxps://files[.]catbox[.]moe/tmp9fc[.]msiURLListed by researchersSearch only2026-02-08HuntingElastic Security Labs, Huntress [1] [2]
hxxps://github[.]com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-amd64[.]msiURLMalware downloadSearch only2026-02-08HuntingElastic Security Labs, Huntress [1] [2]
hxxps://vdfccjpnedujhrzscjtq[.]supabase[.]co/storage/v1/object/public/image/code[.]txtURLListed by researchersSearch only2026-02-08HuntingHuntress [1]
hxxps://vdfccjpnedujhrzscjtq[.]supabase[.]co/storage/v1/object/public/image/v4[.]msiURLListed by researchersSearch only2026-02-08HuntingElastic Security Labs, Huntress [1] [2]
185[.]200[.]177[.]10IP addressAttacker addressSearch only2026-02-06HuntingElastic Security Labs [1]
185[.]82[.]127[.]20IP addressAttacker addressSearch only2026-02-06HuntingElastic Security Labs [1]
193[.]200[.]17[.]163IP addressAttacker addressSearch only2026-02-06HuntingElastic Security Labs [1]
72[.]62[.]35[.]76IP addressAttacker addressSearch only2026-02-06HuntingElastic Security Labs [1]
a727362416834fa63672b87820ff7f27MD5 hashMalware fileSearch only2026-02-06HuntingElastic Security Labs [1]
835b0d87ed2d49899ab6f9479cddb8b4e03f5aeb2365c50a51f9088dcede68d5SHA-256 hashMalware fileSearch only2026-02-06HuntingElastic Security Labs [1]
91[.]92[.]242[.]30IP addressCommand and controlSearch only2026-02-05HuntingBitdefender Labs, Unit 42 [1] [2]
hxxps://swcdn[.]apple[.]com/content/downloads/update/software/upd/URLMalware downloadSearch only2026-02-05HuntingBitdefender Labs [1]
34deb6594098545d7ffb98844f0790bfMD5 hashMalware fileSearch only2026-02-05HuntingZscaler ThreatLabz [1]
49ab8d4c55b7f64eaba699ef0dc9054bMD5 hashMalware fileSearch only2026-02-05HuntingZscaler ThreatLabz [1]
661a5465d9a322276ebc414f39891a8bMD5 hashMalware fileSearch only2026-02-05HuntingZscaler ThreatLabz [1]
193[.]160[.]216[.]221IP addressListed by researchersSearch only2026-02-04HuntingHuntress [1]
69[.]10[.]60[.]250IP addressAttacker addressSearch only2026-02-04HuntingHuntress [1]
3111f4d7d4fac55103453c4c8adb742def007b96b7c8ed265347df97137fbee0SHA-256 hashMalware fileSearch only2026-02-04HuntingHuntress [1]
6a6aaeed4a6bbe82a08d197f5d40c2592a461175f181e0440e0ff45d5fb60939SHA-256 hashMalware fileSearch only2026-02-04HuntingHuntress [1]
analytics[.]freshdatainsights[.]orgDomainCommand and controlSearch only2026-02-04HuntingCheck Point Research [1]
catalogs[.]dailydownloads[.]netDomainListed by researchersSearch only2026-02-04HuntingCheck Point Research [1]
daily[.]getfreshdata[.]comDomainListed by researchersSearch only2026-02-04HuntingCheck Point Research [1]
dns[.]annasoft[.]gcdn[.]coDomainMalware downloadSearch only2026-02-04HuntingCheck Point Research [1]
drive[.]easyboxsync[.]comDomainMalware downloadSearch only2026-02-04HuntingCheck Point Research [1]
get[.]storagesync[.]bizDomainListed by researchersSearch only2026-02-04HuntingCheck Point Research [1]
live[.]easyboxsync[.]comDomainListed by researchersSearch only2026-02-04HuntingCheck Point Research [1]
news[.]dostpagasa[.]comDomainListed by researchersSearch only2026-02-04HuntingCheck Point Research [1]
phnompenhpost[.]netDomainListed by researchersSearch only2026-02-04HuntingCheck Point Research [1]
softwares[.]dailydownloads[.]netDomainListed by researchersSearch only2026-02-04HuntingCheck Point Research [1]
todaynewsfetch[.]comDomainListed by researchersSearch only2026-02-04HuntingCheck Point Research [1]
updates[.]dailydownloads[.]netDomainListed by researchersSearch only2026-02-04HuntingCheck Point Research [1]
www[.]todaynewsfetch[.]comDomainMalware downloadSearch only2026-02-04HuntingCheck Point Research [1]
92[.]223[.]120[.]10IP addressMalware downloadSearch only2026-02-04HuntingCheck Point Research [1]
92[.]223[.]124[.]45IP addressMalware downloadSearch only2026-02-04HuntingCheck Point Research [1]
92[.]223[.]76[.]20IP addressMalware downloadSearch only2026-02-04HuntingCheck Point Research [1]
92[.]38[.]170[.]6IP addressMalware downloadSearch only2026-02-04HuntingCheck Point Research [1]
93[.]123[.]17[.]151IP addressMalware downloadSearch only2026-02-04HuntingCheck Point Research [1]
00351add8e0bca838e8dac40875b8ad5195805bdSHA-1 hashMalware fileSearch only2026-02-04HuntingCheck Point Research [1]
19abb00922f4fb3d4b28713bc866a033a11c1567SHA-1 hashMalware fileSearch only2026-02-04HuntingCheck Point Research [1]
1c1d53cb0f2a2d9b6d7ddb4ed55ed18880ae45e6SHA-1 hashMalware fileSearch only2026-02-04HuntingCheck Point Research [1]
259819d1ae6421c2871f2ba0d128089036a0b29bSHA-1 hashMalware fileSearch only2026-02-04HuntingCheck Point Research [1]
3823415ce9d1408a6595035e1cb634b2e261e005SHA-1 hashMalware fileSearch only2026-02-04HuntingCheck Point Research [1]
3a647d54f0866496d6d71c7b8e9f928759d535fdSHA-1 hashMalware fileSearch only2026-02-04HuntingCheck Point Research [1]
40550c3696581a00b976adddbbef145f2531770eSHA-1 hashMalware fileSearch only2026-02-04HuntingCheck Point Research [1]
44ac2785b0352113ed12b856ec4507fa0b897adfSHA-1 hashMalware fileSearch only2026-02-04HuntingCheck Point Research [1]
481d50d5ab7c0a41a7c4fabb01b5c50c8f4fabf2SHA-1 hashMalware fileSearch only2026-02-04HuntingCheck Point Research [1]