| domain | www[.]file[.]io | 1 | 2026-05-13 |
| filename | /opt/cisco/config/platform/rmdb/CSP_MOUNT_LIST | 1 | 2026-05-13 |
| filename | /opt/cisco/platform/logs/var/log/svc_samcore.log | 1 | 2026-05-13 |
| filename | /usr/bin/lina_cs | 1 | 2026-05-13 |
| domain | bashupload[[.]]app | 1 | 2026-05-13 |
| url | hxxps://api[.]github[.]com/repos/cvaS23uchsahs/rss/issues?state=open | 1 | 2026-05-13 |
| domain | adobe[[.]]com | 1 | 2026-05-13 |
| sha256 | 3529b1422da886b7d04555340dfb1efd44a625c2921af6df39819397176956d6 | 1 | 2026-05-13 |
| sha256 | 538b3b36dd8a30e721cc8dc579098e984cf8ed30b71d55303db45c7344f7a4cf | 1 | 2026-05-13 |
| sha256 | a5035cbd6c31616288aa66d98e5a25441ee38651fb5f330676319f921bb816a4 | 1 | 2026-05-13 |
| sha256 | b44dd12179a15a7d89c18444d36e8d70b51d30c7989d3ab71330061401f731fe | 1 | 2026-05-13 |
| sha256 | bc9635dcc3444c18b447883c6bc1931e5373e48c7dbfaa607285a9fb668b03ea | 1 | 2026-05-13 |
| sha256 | a2b6c7a9c4490df70de3cdbfa5fc801a3e1cf6a872749259487e354de2876b7c | 1 | 2026-05-13 |
| filename | C:\ProgramData\agent.exe | 1 | 2026-05-13 |
| filename | C:\Users\[REDACTED]\Pictures\FunnyApp.exe | 1 | 2026-05-13 |
| domain | staybud[.]dpdns[[.]]org | 1 | 2026-05-13 |
| sha1 | 48A0DE6A43FC6E49318AD6873EA63FE325200DBC | 1 | 2026-05-13 |
| sha1 | 94AF94CA818697E1D99123F69965B11EAD9F010C | 1 | 2026-05-13 |
| url | hxxp://108[.]165[.]230[.]223/protecaocartao/painel.php | 1 | 2026-05-13 |
| domain | protecaocartao[.]online | 1 | 2026-05-13 |
| md5 | 45077cf4716b9091d2a554d03caca964 | 1 | 2026-05-13 |
| url | eppc:// | 1 | 2026-05-13 |
| filename | ~/Library/LaunchAgents/com.user.update.plist | 1 | 2026-05-13 |
| sha256 | 992c951f4af57ca7cd8396f5ed69c2199fd6fd4ae5e93726da3e198e78bec0a5 | 1 | 2026-05-13 |
| sha256 | 5a7d226a379afa156ea96068abd51da74f5f86cd2eb5b6b17ac45ee002d340b4 | 1 | 2026-05-13 |
| domain | sfrclak[[.]]com | 8 | 2026-05-13 |
| sha256 | 0x7efe1f62bb14a978322ab9ed41d670fc0fe0f211331032615c910df5a540e999 | 1 | 2026-05-13 |
| sha256 | 7bbb21fec19512d932b7a92652ed0c8f0fedea89f34b9d6f267cf39de0eb9b20 | 1 | 2026-05-13 |
| domain | bot[.]ddosvps[.]cc | 1 | 2026-05-13 |
| domain | cnc[.]vietdediserver[.]shop | 1 | 2026-05-13 |
| url | hxxp://51[.]38[.]137[.]113/arm7 | 1 | 2026-05-13 |
| sha256 | 909539d3ef8dedc3be56381256713fa5545cc7fd3d3d0e0428f7efb94a7e71cb | 1 | 2026-05-13 |
| domain | chromsterabrowser[[.]]com | 1 | 2026-05-13 |
| sha256 | feb13087c43406da7f2cea26b003a9b93db0e6b544b10bd57342d5dbbb18ba02 | 1 | 2026-05-13 |
| url | hxxps://dl[.]isready26[[.]]online/image/ldk4945jfds[.]gif | 1 | 2026-05-13 |
| domain | worldwidewebuniverse3[[.]]com | 1 | 2026-05-13 |
| sha256 | 61c14c01460810f6f5f760daf8edbda82eea908b1a95052f8e0f9c4162c2900c | 1 | 2026-05-13 |
| sha256 | 7ae413b76424508055154ee262c7567705dc1ac00607f5ac2e43d032221b34b3 | 1 | 2026-05-13 |
| sha256 | c6b848c6a61685724fa9e2b3f6e3a118323ee0c165d1aa8c8a574205a4c4be59 | 1 | 2026-05-13 |
| domain | vtps[[.]]us | 1 | 2026-05-13 |
| sha256 | 38d053135ddceaef0abb8296f3b0bf6114b25e10e6fa1bb8050aeecec4ba8f55 | 4 | 2026-05-13 |
| sha256 | a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91 | 3 | 2026-05-13 |
| domain | checkoutdirectpulse[.]com | 1 | 2026-05-13 |
| url | checkoutdirectpulse.com/ppw2susFLp/?guid=cpOvCtaLmG1ZyCDW | 1 | 2026-05-13 |
| sha256 | 69609e89b04d8d27dc47bda2971376cfd760abb40ffe325f00d0cf3303be8906 | 1 | 2026-05-13 |
| sha256 | 2075fd1a1362d188290910a8c55cf30c11ed5955c04af410c481410f538da419 | 1 | 2026-05-13 |
| domain | check02id[.]com | 1 | 2026-05-13 |
| filename | ~/Library/Application Support/iCloud/icloudz | 1 | 2026-05-13 |
| filename | /Library/LaunchDaemons/com.google.webkit.service.plist | 1 | 2026-05-13 |
| domain | models[.]litellm[.]cloud | 3 | 2026-05-13 |
![hxxps://dl[.]isready26[[.]]online/image/ldk4945jfds[.]gif](/iocs/url/https%3A%2F%2Fdl.isready26%5B.%5Donline%2Fimage%2Fldk4945jfds.gif){kind=link}