| sha256 | fcb81618bb15edfdedfb638b4c08a2af9cac9ecfa551af135a8402bf980375cf | 2 | 2026-05-13 |
| sha256 | ed8560c1ac7ceb6983ba995124d5917dc1a00288912387a6389296637d5f815c | 1 | 2026-05-13 |
| user_agent | mozilla/4.0 (compatible; msie 8.0; windows nt 5.1; trident/4.0) | 1 | 2026-05-13 |
| filename | %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\msbuild.exe | 2 | 2026-05-13 |
| url | hxxp://83[.]142[.]209[.]203:8080/hangup.wav | 2 | 2026-05-13 |
| url | hxxp://83[.]142[.]209[.]203:8080/ringtone.wav | 2 | 2026-05-13 |
| domain | apiexplorerzone[[.]]com | 1 | 2026-05-13 |
| domain | rapiddevapi[[.]]com | 1 | 2026-05-13 |
| domain | ryptosell[[.]]shop | 1 | 2026-05-13 |
| domain | subiz[[.]]tds11111[[.]]com | 1 | 2026-05-13 |
| domain | tds11111[[.]]com | 1 | 2026-05-13 |
| md5 | 22e32bcf113326e366ac480b077067cf | 1 | 2026-05-13 |
| md5 | 248a4d7d4c48478dcbeade8f7dba80b3 | 1 | 2026-05-13 |
| md5 | 9b435ad985b733b64a6d5f39080f4ae0 | 1 | 2026-05-13 |
| sha256 | 58401c195fe0a6204b42f5f90995ece5fab74ce7c69c67a24c61a057325af668 | 1 | 2026-05-13 |
| filename | %APPDATA%\HostData\sysdata.exe | 1 | 2026-05-13 |
| url | hxxps://github[[.]]com/lebnabar198/Hgh5gM99fe3dG/raw/refs/heads/main/MnrsInstllr_240126[[.]]exe | 1 | 2026-05-13 |
| domain | tabbysbakescodes[[.]]ws | 1 | 2026-05-13 |
| filename | %TEMP%\WinRing0x64.sys | 1 | 2026-05-13 |
| domain | windirautoupdates[[.]]top | 1 | 2026-05-13 |
| npm_package | [email protected] | 1 | 2026-05-13 |
| npm_package | [email protected] | 1 | 2026-05-13 |
| url | hxxp://sfrclak[.]com:8000/6202033 | 1 | 2026-05-13 |
| filename | %PROGRAMDATA%\wt.exe | 1 | 2026-05-13 |
| filename | /tmp/ld.py | 1 | 2026-05-13 |
| domain | checkmarx[.]zone | 2 | 2026-05-13 |
| url | hxxps://notifcation[.]inedin[.]digital/?xgsrdh=12602024008489914930&provider=4__cmppbWVuZXpAaWJlcmRyb2xhLmNvbQ==__xvpji__lkkd | 1 | 2026-05-13 |
| url | hxxps://singletoncop[.]info/webxr.php | 1 | 2026-05-13 |
| domain | inedin[.]digital | 1 | 2026-05-13 |
| domain | khanieteam[.]com | 1 | 2026-05-13 |
| url | /saml/login | 1 | 2026-05-13 |
| url | /wsfed/passive?wctx | 1 | 2026-05-13 |
| sha256 | 05995284b59ad0066350f43517382228f7eee63cd297e787b2a271f69ecf2dfc | 1 | 2026-05-13 |
| sha256 | 1aa37a477c539edf25656a300002a28d4246ec83344422dd705b42d3443a2623 | 1 | 2026-05-13 |
| sha256 | 4b29b74798a4e6538f2ba245c57be82953383dc91fe0a91b984b903d12043e92 | 1 | 2026-05-13 |
| sha256 | 9d7c8d3bc4ac108fb2602424a1f4918c051c2443f0526bbb2c970c8e57dbd90d | 1 | 2026-05-13 |
| filename | C:\Program Files\Common Files\Bitdefender\SetupInformation\version.dll | 1 | 2026-05-13 |
| domain | laichingte[.]net | 1 | 2026-05-13 |
| domain | webmail[.]rpcthai[.]com | 1 | 2026-05-13 |
| filename | ~/.config/sysmon/sysmon.py | 1 | 2026-05-13 |
| filename | ~/.config/systemd/user/sysmon.service | 1 | 2026-05-13 |
| filename | LiteLLM_init.pth | 1 | 2026-05-13 |
| email | [email protected] | 1 | 2026-05-13 |
| url | hxxps://www[.]amolikhousing[.]co[.]in/XIAOMI/ | 1 | 2026-05-13 |
| domain | www[.]amolikhousing[.]co[.]in | 1 | 2026-05-13 |
| domain | drnatashachinn[.]com | 1 | 2026-05-13 |
| url | hxxps://share[.]google/fsdfMWqdXuz1RnQ3w | 1 | 2026-05-13 |
| url | hxxps://share[.]google/yUtxD9cPL5ShQyUMJ | 1 | 2026-05-13 |
| sha256 | b98b53ca03e3e9009b31bcc37b90b206064b25effce449dde63c51cef6a47470 | 1 | 2026-05-13 |
| domain | honknft[.]com | 1 | 2026-05-13 |
