Indicators of compromise
1,370 indicators auto-extracted from article text · hashes, IPs, domains, URLs · verify before use
| Type | Indicator | Context | Article | First seen |
|---|---|---|---|---|
| sha256 | 42fdaffdbacfdf85945bd0e8bfaadb765dde622a0a7268f8aa70cd18c91a0e85 | 77ec346af050ffd90a43b8dcd528c9633b Nov 9, 2018 Smoke Loader 42fdaffdbacfdf85945bd0e8bfaadb765dde622a0a7268f8aa70cd18c91a0e85 Nov 15, 2018 Smoke Loader fb3def9c23ba81f85aae0f563f4156ba9 | Analysis of Smoke Loader in New Tsunami Campaign Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 55ae2b00234674d82dcc401a0daa97e7b3921057a07970347815d9c50dddbda8 | c2d8a16b86654d7ddc772f12c4fc64292a32a96fde7a Racemodel[.]at 55ae2b00234674d82dcc401a0daa97e7b3921057a07970347815d9c50dddbda8 Table 3 Domains and Marcher hashes On November 25, we confi | Analysis of Smoke Loader in New Tsunami Campaign Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 70900b5777ea48f4c635f78b597605e9bdbbee469b3052f1bd0088a1d18f85d3 | 4156ba9453c2e928728283de4abdfb5b5f426f Nov 24, 2018 AzoRult 70900b5777ea48f4c635f78b597605e9bdbbee469b3052f1bd0088a1d18f85d3 Nov 25, 2018 Smoke Loadera 1ce72ec2f2fe6139eb6bb35b8a4fb40a | Analysis of Smoke Loader in New Tsunami Campaign Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 7337143e5fb7ecbdf1911e248d73c930a81100206e8813ad3a90d4dd69ee53c7 | a4fb40aca2d90bc19872d6517a6ebb66b6b139 Nov 27, 2018 AzoRult 7337143e5fb7ecbdf1911e248d73c930a81100206e8813ad3a90d4dd69ee53c7 Nov 30, 2018 Changes the IP address associates with jma-go[ | Analysis of Smoke Loader in New Tsunami Campaign Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 748c94bfdb94b322c876114fcf55a6043f1cd612766e8af1635218a747f45fb9 | 43e5fb7ecbdf1911e248d73c930a81100206e8813ad3a90d4dd69ee53c7 748c94bfdb94b322c876114fcf55a6043f1cd612766e8af1635218a747f45fb9 Marcher Samples 55ae2b00234674d82dcc401a0daa97e7b3921057a07 | Analysis of Smoke Loader in New Tsunami Campaign Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 75edaae605622e056a40c2d8a16b86654d7ddc772f12c4fc64292a32a96fde7a | cbcb0805ed79d9bd417955c016236143eb2ecd827 Mountainhigh[.]at 75edaae605622e056a40c2d8a16b86654d7ddc772f12c4fc64292a32a96fde7a Racemodel[.]at 55ae2b00234674d82dcc401a0daa97e7b3921057a079 | Analysis of Smoke Loader in New Tsunami Campaign Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 8a1aab36c3940e4dd83f489432fa710fba582e254c3a52459c52826d6a822f2d | 591efe5aefd379205e5cc3af574bb9f415 Nov 6, 2018 Smoke Loader 8a1aab36c3940e4dd83f489432fa710fba582e254c3a52459c52826d6a822f2d 0db3fd1394b15b98f4e112102cdec6cc569062cdb199b66c5838c54cbc2 | Analysis of Smoke Loader in New Tsunami Campaign Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | a1ce72ec2f2fe6139eb6bb35b8a4fb40aca2d90bc19872d6517a6ebb66b6b139 | f9c23ba81f85aae0f563f4156ba9453c2e928728283de4abdfb5b5f426f a1ce72ec2f2fe6139eb6bb35b8a4fb40aca2d90bc19872d6517a6ebb66b6b139 AzoRult Samples 70900b5777ea48f4c635f78b597605e9bdbbee469b3 | Analysis of Smoke Loader in New Tsunami Campaign Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | be3817b9f14df3e0af82ae47b0904ac38d022e2b2d7bb7f8f9800b534b60183c | d1394b15b98f4e112102cdec6cc569062cdb199b66c5838c54cbc286277 be3817b9f14df3e0af82ae47b0904ac38d022e2b2d7bb7f8f9800b534b60183c Nov 8, 2018 Smoke Loader 27aa9cdf60f1fbff84ede0d77bd49677ec | Analysis of Smoke Loader in New Tsunami Campaign Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | fb3def9c23ba81f85aae0f563f4156ba9453c2e928728283de4abdfb5b5f426f | 65dde622a0a7268f8aa70cd18c91a0e85 Nov 15, 2018 Smoke Loader fb3def9c23ba81f85aae0f563f4156ba9453c2e928728283de4abdfb5b5f426f Nov 24, 2018 AzoRult 70900b5777ea48f4c635f78b597605e9bdbbee | Analysis of Smoke Loader in New Tsunami Campaign Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 040abac56542a2e0f384adf37c8f95b2b6e6ce3a0ff969e3c1d572e6b4053ff3 | nique through a legitimate program. The RAR archive (SHA256:040abac56542a2e0f384adf37c8f95b2b6e6ce3a0ff969e3c1d572e6b4053ff3) has the Vietnamese file name ‘Don khieu nai.rar’ which tra | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 4321a9f95901a77b4acfbaef3596cf681712345e1cbd764873c6643fe9da7331 | 926b73a6a5bc71d655c8d611b40e80464da9f1134bfce7b930e23e273ab 4321a9f95901a77b4acfbaef3596cf681712345e1cbd764873c6643fe9da7331 KerrDown DLLs: 4a0309d8043e8acd7cb5c7cfca95223afe9c15a1c345 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 4a0309d8043e8acd7cb5c7cfca95223afe9c15a1c34578643b49ded4b786506b | baef3596cf681712345e1cbd764873c6643fe9da7331 KerrDown DLLs: 4a0309d8043e8acd7cb5c7cfca95223afe9c15a1c34578643b49ded4b786506b 4b431af677041dae3c988fcc901ac8ec6e74c6e1467787bf099c4abd658 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 4b431af677041dae3c988fcc901ac8ec6e74c6e1467787bf099c4abd658be5be | 9d8043e8acd7cb5c7cfca95223afe9c15a1c34578643b49ded4b786506b 4b431af677041dae3c988fcc901ac8ec6e74c6e1467787bf099c4abd658be5be 4bc00f7d638e042da764e8648c03c0db46700599dd4f08d117e3e9e8b53 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 4bc00f7d638e042da764e8648c03c0db46700599dd4f08d117e3e9e8b538519b | af677041dae3c988fcc901ac8ec6e74c6e1467787bf099c4abd658be5be 4bc00f7d638e042da764e8648c03c0db46700599dd4f08d117e3e9e8b538519b 4e2f8f104e6cd07508c5b7d49737a1db5eeba910adfdb4c19442a7699dc | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 4e2f8f104e6cd07508c5b7d49737a1db5eeba910adfdb4c19442a7699dc78cfc | f7d638e042da764e8648c03c0db46700599dd4f08d117e3e9e8b538519b 4e2f8f104e6cd07508c5b7d49737a1db5eeba910adfdb4c19442a7699dc78cfc 4e791f2511c9bd3c63c8e37aa6625d8b590054de9e1cca13a7be2630bc2 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 4e791f2511c9bd3c63c8e37aa6625d8b590054de9e1cca13a7be2630bc2af9ce | f104e6cd07508c5b7d49737a1db5eeba910adfdb4c19442a7699dc78cfc 4e791f2511c9bd3c63c8e37aa6625d8b590054de9e1cca13a7be2630bc2af9ce 539e8a53db3f858914cfe0d2132f11de34a691391ba71673a8b1e61367a | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 539e8a53db3f858914cfe0d2132f11de34a691391ba71673a8b1e61367a963c7 | f2511c9bd3c63c8e37aa6625d8b590054de9e1cca13a7be2630bc2af9ce 539e8a53db3f858914cfe0d2132f11de34a691391ba71673a8b1e61367a963c7 53cd92f37ffd0822cc644717363ba239d75c6d9af0fa305339eaf34077e | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 53cd92f37ffd0822cc644717363ba239d75c6d9af0fa305339eaf34077edd22d | a53db3f858914cfe0d2132f11de34a691391ba71673a8b1e61367a963c7 53cd92f37ffd0822cc644717363ba239d75c6d9af0fa305339eaf34077edd22d 53efaac9244c24fab58216a907783748d48cb32dbdc2f1f6fb672bd49f1 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 53efaac9244c24fab58216a907783748d48cb32dbdc2f1f6fb672bd49f12be4c | 2f37ffd0822cc644717363ba239d75c6d9af0fa305339eaf34077edd22d 53efaac9244c24fab58216a907783748d48cb32dbdc2f1f6fb672bd49f12be4c 5c18c3e6f7ac0d0ac2b5fa9a6435ee90d6bd77995f85bed9e948097891d | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 5c18c3e6f7ac0d0ac2b5fa9a6435ee90d6bd77995f85bed9e948097891d42ca2 | ac9244c24fab58216a907783748d48cb32dbdc2f1f6fb672bd49f12be4c 5c18c3e6f7ac0d0ac2b5fa9a6435ee90d6bd77995f85bed9e948097891d42ca2 5cda7d8294a8804d09108359dd2d96cdf4fdcf22ec9c00f0182d005afff | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 5cda7d8294a8804d09108359dd2d96cdf4fdcf22ec9c00f0182d005afff76743 | 3e6f7ac0d0ac2b5fa9a6435ee90d6bd77995f85bed9e948097891d42ca2 5cda7d8294a8804d09108359dd2d96cdf4fdcf22ec9c00f0182d005afff76743 5f0db8216314da1f128b883b918e5ac722202a2ae0c4d0bf1c5da5914a6 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 5f0db8216314da1f128b883b918e5ac722202a2ae0c4d0bf1c5da5914a66778e | d8294a8804d09108359dd2d96cdf4fdcf22ec9c00f0182d005afff76743 5f0db8216314da1f128b883b918e5ac722202a2ae0c4d0bf1c5da5914a66778e 6010d44cdca58cdec4559040e08798e7b28b9434bda940da0a670c93c84 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 6010d44cdca58cdec4559040e08798e7b28b9434bda940da0a670c93c84e33cd | 8216314da1f128b883b918e5ac722202a2ae0c4d0bf1c5da5914a66778e 6010d44cdca58cdec4559040e08798e7b28b9434bda940da0a670c93c84e33cd 60b65ebb921dca4762aef427181775d10bbffc30617d777102762ab7913 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 60b65ebb921dca4762aef427181775d10bbffc30617d777102762ab7913a5aa1 | 44cdca58cdec4559040e08798e7b28b9434bda940da0a670c93c84e33cd 60b65ebb921dca4762aef427181775d10bbffc30617d777102762ab7913a5aa1 6146aedfe47597606fb4b05458ec4b99d4e1042da7dc974fa33a57e282c | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 6146aedfe47597606fb4b05458ec4b99d4e1042da7dc974fa33a57e282cd7349 | ebb921dca4762aef427181775d10bbffc30617d777102762ab7913a5aa1 6146aedfe47597606fb4b05458ec4b99d4e1042da7dc974fa33a57e282cd7349 6245b74b1cc830ed95cb630192c704da66600b90a331d9e6db70210acb6 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 6245b74b1cc830ed95cb630192c704da66600b90a331d9e6db70210acb6c7dfa | edfe47597606fb4b05458ec4b99d4e1042da7dc974fa33a57e282cd7349 6245b74b1cc830ed95cb630192c704da66600b90a331d9e6db70210acb6c7dfa 67cd191eb2322bf8b0f04a63a9e7cb7bc52fb4a4444fcb8fed2963884ae | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 67cd191eb2322bf8b0f04a63a9e7cb7bc52fb4a4444fcb8fed2963884aede3aa | 74b1cc830ed95cb630192c704da66600b90a331d9e6db70210acb6c7dfa 67cd191eb2322bf8b0f04a63a9e7cb7bc52fb4a4444fcb8fed2963884aede3aa 68f77119eae5e9d2404376f2d87e71e4ab554c026e362c57313e5881005 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 68f77119eae5e9d2404376f2d87e71e4ab554c026e362c57313e5881005ae79e | 91eb2322bf8b0f04a63a9e7cb7bc52fb4a4444fcb8fed2963884aede3aa 68f77119eae5e9d2404376f2d87e71e4ab554c026e362c57313e5881005ae79e 69e679daaaff3832c39671bf2b813b5530a70fb763d381f9a6e22e3bc49 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 69e679daaaff3832c39671bf2b813b5530a70fb763d381f9a6e22e3bc493c8a9 | 119eae5e9d2404376f2d87e71e4ab554c026e362c57313e5881005ae79e 69e679daaaff3832c39671bf2b813b5530a70fb763d381f9a6e22e3bc493c8a9 6faa7deb1e1e0c3a7c62c2bb0ecdfa56b6e3ba4fe16971ec4572267ac70 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 6faa7deb1e1e0c3a7c62c2bb0ecdfa56b6e3ba4fe16971ec4572267ac70b9177 | 9daaaff3832c39671bf2b813b5530a70fb763d381f9a6e22e3bc493c8a9 6faa7deb1e1e0c3a7c62c2bb0ecdfa56b6e3ba4fe16971ec4572267ac70b9177 6fb397e90f72783adec279434fe805c732ddb7d1d6aa72f19e91a1bf585 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 6fb397e90f72783adec279434fe805c732ddb7d1d6aa72f19e91a1bf585e1ea5 | deb1e1e0c3a7c62c2bb0ecdfa56b6e3ba4fe16971ec4572267ac70b9177 6fb397e90f72783adec279434fe805c732ddb7d1d6aa72f19e91a1bf585e1ea5 70db041fb5aadb63c1b8ae57ba2699baa0086e9b011219dcebcccbf6320 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 70db041fb5aadb63c1b8ae57ba2699baa0086e9b011219dcebcccbf632017992 | 7e90f72783adec279434fe805c732ddb7d1d6aa72f19e91a1bf585e1ea5 70db041fb5aadb63c1b8ae57ba2699baa0086e9b011219dcebcccbf632017992 7673f5468ba3cf01500f6bb6a19ce7208c8b6fc24f1a3a388eca491bc25 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 73dcbcc47d6bd95dcf031ebbd34ac42301a20ee1143ac130b405e79b4ba40fc8 | anLotus and KerrDown . Indicators of Compromise: Lure Docs: 73dcbcc47d6bd95dcf031ebbd34ac42301a20ee1143ac130b405e79b4ba40fc8 89e19df797481ae2d2c895bcf030fe19e581976d2aef90c89bd6b340857 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 7673f5468ba3cf01500f6bb6a19ce7208c8b6fc24f1a3a388eca491bc25cd9cd | 41fb5aadb63c1b8ae57ba2699baa0086e9b011219dcebcccbf632017992 7673f5468ba3cf01500f6bb6a19ce7208c8b6fc24f1a3a388eca491bc25cd9cd 77805a46f73e118ae2428f8c22ba28f79f7c60aeb6305d41c0bf3ebb9ce | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 77805a46f73e118ae2428f8c22ba28f79f7c60aeb6305d41c0bf3ebb9ce70f94 | 5468ba3cf01500f6bb6a19ce7208c8b6fc24f1a3a388eca491bc25cd9cd 77805a46f73e118ae2428f8c22ba28f79f7c60aeb6305d41c0bf3ebb9ce70f94 788265447391189ffc1956ebfec990dc051b56f506402d43cd1d4de9670 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 788265447391189ffc1956ebfec990dc051b56f506402d43cd1d4de96709c082 | a46f73e118ae2428f8c22ba28f79f7c60aeb6305d41c0bf3ebb9ce70f94 788265447391189ffc1956ebfec990dc051b56f506402d43cd1d4de96709c082 7be613237b57fbc3cb83d001efadeed9936a2f519c514ab80de8285bdc5 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 7be613237b57fbc3cb83d001efadeed9936a2f519c514ab80de8285bdc5a666c | 5447391189ffc1956ebfec990dc051b56f506402d43cd1d4de96709c082 7be613237b57fbc3cb83d001efadeed9936a2f519c514ab80de8285bdc5a666c 7dbb7fab4782f5e3b0c416c05114f2a51f12643805d5f3d0cd80d32272f | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 7dbb7fab4782f5e3b0c416c05114f2a51f12643805d5f3d0cd80d32272f2731a | 3237b57fbc3cb83d001efadeed9936a2f519c514ab80de8285bdc5a666c 7dbb7fab4782f5e3b0c416c05114f2a51f12643805d5f3d0cd80d32272f2731a 7ec77e643d8d7cc18cc67c123feceed91d10db1cc9fa0c49164cba35bb1 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 7ec77e643d8d7cc18cc67c123feceed91d10db1cc9fa0c49164cba35bb1da987 | fab4782f5e3b0c416c05114f2a51f12643805d5f3d0cd80d32272f2731a 7ec77e643d8d7cc18cc67c123feceed91d10db1cc9fa0c49164cba35bb1da987 860f165c2240f2a83eb30c412755e5a025e25961ce4633683f5bc22f6a2 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 860f165c2240f2a83eb30c412755e5a025e25961ce4633683f5bc22f6a24ddb6 | e643d8d7cc18cc67c123feceed91d10db1cc9fa0c49164cba35bb1da987 860f165c2240f2a83eb30c412755e5a025e25961ce4633683f5bc22f6a24ddb6 868ed69533fac80354a101410d3dd0a66f444385c6611cc85c5b0be49db | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 868ed69533fac80354a101410d3dd0a66f444385c6611cc85c5b0be49db2d6fd | 65c2240f2a83eb30c412755e5a025e25961ce4633683f5bc22f6a24ddb6 868ed69533fac80354a101410d3dd0a66f444385c6611cc85c5b0be49db2d6fd 89759e56d5c23085e47d2be2ce4ad4484dfdd4204044a78671ed434cec1 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 89759e56d5c23085e47d2be2ce4ad4484dfdd4204044a78671ed434cec19b693 | 69533fac80354a101410d3dd0a66f444385c6611cc85c5b0be49db2d6fd 89759e56d5c23085e47d2be2ce4ad4484dfdd4204044a78671ed434cec19b693 8b7fb1cd5c09f7ec57ccc0c4261c0b4df0604962556a1d401b9cbfd750d | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 89e19df797481ae2d2c895bcf030fe19e581976d2aef90c89bd6b3408579bfc3 | involving a new payload, KerrDown. The lure hash is (SHA256:89e19df797481ae2d2c895bcf030fe19e581976d2aef90c89bd6b3408579bfc3) Figure 1 below shows a snapshot of the lure file. Once the | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 8b7fb1cd5c09f7ec57ccc0c4261c0b4df0604962556a1d401b9cbfd750df60ba | e56d5c23085e47d2be2ce4ad4484dfdd4204044a78671ed434cec19b693 8b7fb1cd5c09f7ec57ccc0c4261c0b4df0604962556a1d401b9cbfd750df60ba 8d6e31c95d649c08cdc2f82085298173d03c03afe02f0dacb66dd356014 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 8bf22202e4fd4c005afde2266413cba9d1b749b1a2d75deac0c35728b5eb3af8 | 6341b4172d2cb752de4b938bf678ceb627ecb72594730b78bd05a2fad9d 8bf22202e4fd4c005afde2266413cba9d1b749b1a2d75deac0c35728b5eb3af8 df8210d20c5eb80d44ba8fa4c41c26c8421dcb20168e4f796e4955e01eb | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 8d6e31c95d649c08cdc2f82085298173d03c03afe02f0dacb66dd3560149184f | 1cd5c09f7ec57ccc0c4261c0b4df0604962556a1d401b9cbfd750df60ba 8d6e31c95d649c08cdc2f82085298173d03c03afe02f0dacb66dd3560149184f 942d763604d0aefdff10ce095f806195f351124a8433c96f5590d89d809 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 942d763604d0aefdff10ce095f806195f351124a8433c96f5590d89d809a562f | 1c95d649c08cdc2f82085298173d03c03afe02f0dacb66dd3560149184f 942d763604d0aefdff10ce095f806195f351124a8433c96f5590d89d809a562f 98a5f30699564e6d9f74e737a611246262907b9e91b90348f7de53eb4cf | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 94fab926b73a6a5bc71d655c8d611b40e80464da9f1134bfce7b930e23e273ab | 0d20c5eb80d44ba8fa4c41c26c8421dcb20168e4f796e4955e01ebc9e13 94fab926b73a6a5bc71d655c8d611b40e80464da9f1134bfce7b930e23e273ab 4321a9f95901a77b4acfbaef3596cf681712345e1cbd764873c6643fe9d | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 98a5f30699564e6d9f74e737a611246262907b9e91b90348f7de53eb4cf32665 | 63604d0aefdff10ce095f806195f351124a8433c96f5590d89d809a562f 98a5f30699564e6d9f74e737a611246262907b9e91b90348f7de53eb4cf32665 9e6011d6380207e2bf5105cde3d48e412db565b92cdc1b3c6aa15bd7bd4 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 9e6011d6380207e2bf5105cde3d48e412db565b92cdc1b3c6aa15bd7bd4b099f | 30699564e6d9f74e737a611246262907b9e91b90348f7de53eb4cf32665 9e6011d6380207e2bf5105cde3d48e412db565b92cdc1b3c6aa15bd7bd4b099f a106e0a6b7cc30b161e5ea0b1ec0f28ab89c2e1eb7ba2d5d409ddbabc3b | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | a106e0a6b7cc30b161e5ea0b1ec0f28ab89c2e1eb7ba2d5d409ddbabc3b037e6 | 1d6380207e2bf5105cde3d48e412db565b92cdc1b3c6aa15bd7bd4b099f a106e0a6b7cc30b161e5ea0b1ec0f28ab89c2e1eb7ba2d5d409ddbabc3b037e6 a2b905c26e2b92e63de85d83e280249258cb21f300d8c4a3a6bdb488676 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | a2b905c26e2b92e63de85d83e280249258cb21f300d8c4a3a6bdb488676e9bcf | 0a6b7cc30b161e5ea0b1ec0f28ab89c2e1eb7ba2d5d409ddbabc3b037e6 a2b905c26e2b92e63de85d83e280249258cb21f300d8c4a3a6bdb488676e9bcf a4a86e96f95f395fcf0ceb6a74a2564f4ba7adbe1b40cc702b054427327 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | a4a066341b4172d2cb752de4b938bf678ceb627ecb72594730b78bd05a2fad9d | df797481ae2d2c895bcf030fe19e581976d2aef90c89bd6b3408579bfc3 a4a066341b4172d2cb752de4b938bf678ceb627ecb72594730b78bd05a2fad9d 8bf22202e4fd4c005afde2266413cba9d1b749b1a2d75deac0c35728b5e | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | a4a86e96f95f395fcf0ceb6a74a2564f4ba7adbe1b40cc702b054427327a0399 | 5c26e2b92e63de85d83e280249258cb21f300d8c4a3a6bdb488676e9bcf a4a86e96f95f395fcf0ceb6a74a2564f4ba7adbe1b40cc702b054427327a0399 a8192656dd1db0be4cec9d03b4d10e0529d9c52c899eda8d8e72698acfb | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | a8192656dd1db0be4cec9d03b4d10e0529d9c52c899eda8d8e72698acfb61419 | e96f95f395fcf0ceb6a74a2564f4ba7adbe1b40cc702b054427327a0399 a8192656dd1db0be4cec9d03b4d10e0529d9c52c899eda8d8e72698acfb61419 a8f776bd3a9593e963b567ce790033fec2804ea0afb40a92d40e21d8f33 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | a8f776bd3a9593e963b567ce790033fec2804ea0afb40a92d40e21d8f33d066f | 656dd1db0be4cec9d03b4d10e0529d9c52c899eda8d8e72698acfb61419 a8f776bd3a9593e963b567ce790033fec2804ea0afb40a92d40e21d8f33d066f b4966f8febdba6b2d674afffc65b1df11e7565acbd4517f1e5b9b36a8c6 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | b4966f8febdba6b2d674afffc65b1df11e7565acbd4517f1e5b9b36a8c6a16ed | 6bd3a9593e963b567ce790033fec2804ea0afb40a92d40e21d8f33d066f b4966f8febdba6b2d674afffc65b1df11e7565acbd4517f1e5b9b36a8c6a16ed bb25f1a73d095d57b2c8c9ac6780e4d412ddf3d9eef84a54903cc8e4eae | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | bb25f1a73d095d57b2c8c9ac6780e4d412ddf3d9eef84a54903cc8e4eaefc335 | f8febdba6b2d674afffc65b1df11e7565acbd4517f1e5b9b36a8c6a16ed bb25f1a73d095d57b2c8c9ac6780e4d412ddf3d9eef84a54903cc8e4eaefc335 bc82bce004afb6424e9d9f9fc04a84f58edf859c4029eda08f7309dbeec | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | bc82bce004afb6424e9d9f9fc04a84f58edf859c4029eda08f7309dbeec67696 | 1a73d095d57b2c8c9ac6780e4d412ddf3d9eef84a54903cc8e4eaefc335 bc82bce004afb6424e9d9f9fc04a84f58edf859c4029eda08f7309dbeec67696 c30198e0b0e470d4ac8821bd14bb754466e7974f1c20be8b300961e9e89 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | c30198e0b0e470d4ac8821bd14bb754466e7974f1c20be8b300961e9e89ed1ea | ce004afb6424e9d9f9fc04a84f58edf859c4029eda08f7309dbeec67696 c30198e0b0e470d4ac8821bd14bb754466e7974f1c20be8b300961e9e89ed1ea caabc45e59820a4349db13f337063eddede8a0847ae313d89a800f241d8 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | caabc45e59820a4349db13f337063eddede8a0847ae313d89a800f241d8556c8 | 8e0b0e470d4ac8821bd14bb754466e7974f1c20be8b300961e9e89ed1ea caabc45e59820a4349db13f337063eddede8a0847ae313d89a800f241d8556c8 d3ef6643ad529d43a7ec313b52c8396dc52c4daad688360eb207ee91a1c | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | d3ef6643ad529d43a7ec313b52c8396dc52c4daad688360eb207ee91a1caf7b2 | 45e59820a4349db13f337063eddede8a0847ae313d89a800f241d8556c8 d3ef6643ad529d43a7ec313b52c8396dc52c4daad688360eb207ee91a1caf7b2 e3c818052237bb4bb061290ab5e2a55c3852c8a3fef16436b1197e8b17d | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | df8210d20c5eb80d44ba8fa4c41c26c8421dcb20168e4f796e4955e01ebc9e13 | 202e4fd4c005afde2266413cba9d1b749b1a2d75deac0c35728b5eb3af8 df8210d20c5eb80d44ba8fa4c41c26c8421dcb20168e4f796e4955e01ebc9e13 94fab926b73a6a5bc71d655c8d611b40e80464da9f1134bfce7b930e23e | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | e3c818052237bb4bb061290ab5e2a55c3852c8a3fef16436b1197e8b17de2e18 | 643ad529d43a7ec313b52c8396dc52c4daad688360eb207ee91a1caf7b2 e3c818052237bb4bb061290ab5e2a55c3852c8a3fef16436b1197e8b17de2e18 e56ffcf5df2afd6b151c24ddfe7cd450f9208f59b5731991b926af0dce2 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | e56ffcf5df2afd6b151c24ddfe7cd450f9208f59b5731991b926af0dce24285a | 8052237bb4bb061290ab5e2a55c3852c8a3fef16436b1197e8b17de2e18 e56ffcf5df2afd6b151c24ddfe7cd450f9208f59b5731991b926af0dce24285a e8704bf6525c90e0f5664f400c3bf8ff5da565080a52126e0e6a6286915 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | e8704bf6525c90e0f5664f400c3bf8ff5da565080a52126e0e6a62869157dfe3 | cf5df2afd6b151c24ddfe7cd450f9208f59b5731991b926af0dce24285a e8704bf6525c90e0f5664f400c3bf8ff5da565080a52126e0e6a62869157dfe3 e8a454cd8b57a243f0abeec6945c9b10616cfdcc4abfb4c618bfc469d02 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | e8a454cd8b57a243f0abeec6945c9b10616cfdcc4abfb4c618bfc469d026d537 | bf6525c90e0f5664f400c3bf8ff5da565080a52126e0e6a62869157dfe3 e8a454cd8b57a243f0abeec6945c9b10616cfdcc4abfb4c618bfc469d026d537 eac776c3c83c9db1a770ffaf6df9e94611c8293cbd41cb9257148603b8f | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | eac776c3c83c9db1a770ffaf6df9e94611c8293cbd41cb9257148603b8f2be0b | 4cd8b57a243f0abeec6945c9b10616cfdcc4abfb4c618bfc469d026d537 eac776c3c83c9db1a770ffaf6df9e94611c8293cbd41cb9257148603b8f2be0b ead0f3e6f0ca16b283f09526d09e8e8cba687dab642f0e102e5487cb565 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | ead0f3e6f0ca16b283f09526d09e8e8cba687dab642f0e102e5487cb565bf475 | 6c3c83c9db1a770ffaf6df9e94611c8293cbd41cb9257148603b8f2be0b ead0f3e6f0ca16b283f09526d09e8e8cba687dab642f0e102e5487cb565bf475 f011a136996fa53fdbde944da0908da446b9532307a35c44ed08241b5e6 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | f011a136996fa53fdbde944da0908da446b9532307a35c44ed08241b5e602cc9 | 3e6f0ca16b283f09526d09e8e8cba687dab642f0e102e5487cb565bf475 f011a136996fa53fdbde944da0908da446b9532307a35c44ed08241b5e602cc9 f2a2f4fa2ed5b2a94720a4661937da97ab21aa198a5f8c83bb6895aa2c3 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | f2a2f4fa2ed5b2a94720a4661937da97ab21aa198a5f8c83bb6895aa2c398d22 | 136996fa53fdbde944da0908da446b9532307a35c44ed08241b5e602cc9 f2a2f4fa2ed5b2a94720a4661937da97ab21aa198a5f8c83bb6895aa2c398d22 f62f21ee7e642f272b881827b45ceb643c999a742e1d3eac13d1ba014d1 | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | f62f21ee7e642f272b881827b45ceb643c999a742e1d3eac13d1ba014d1e7f67 | 4fa2ed5b2a94720a4661937da97ab21aa198a5f8c83bb6895aa2c398d22 f62f21ee7e642f272b881827b45ceb643c999a742e1d3eac13d1ba014d1e7f67 f9f0973dc74716b75291f5a9b2d59b08500882563011d1def2b8d0b1b9b | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | f9f0973dc74716b75291f5a9b2d59b08500882563011d1def2b8d0b1b9bbb8ae | 1ee7e642f272b881827b45ceb643c999a742e1d3eac13d1ba014d1e7f67 f9f0973dc74716b75291f5a9b2d59b08500882563011d1def2b8d0b1b9bbb8ae C2: theme[[.]]blogsite[.]org cortana[.]homelinux[.]com word | Tracking OceanLotus’ new Downloader, KerrDown Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | bd62d3808ef29c557da64b412c4422935a641c22e2bdcfe5128c96f2ff5b5e99 | m ad-blocking24[.]net Myqenad24[.]com PUP download example: bd62d3808ef29c557da64b412c4422935a641c22e2bdcfe5128c96f2ff5b5e99 artificius[.]com Other campaign domains: hoanoola[.]net all | ApateWeb: An Evasive Large-Scale Scareware and PUP Delivery Campaign Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | bad2294523c7abd42c3184d1e513bf851cb649a4acd9543cdf5d54d21f52c937 | roid, PC and iOS platforms. The Android APK with the SHA256 bad2294523c7abd42c3184d1e513bf851cb649a4acd9543cdf5d54d21f52c937 requests access to sensitive data on the victim device, ind | Scam Attacks Taking Advantage of the Popularity of the Generative AI Wave Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 01a96eeafb72042b3f69afd21b4c9155dbfe7f97ab3dca392972ad531a075ac2 | 6.54[.]109 194.76.227[.]94 206.189.229[.]43 Malware samples 01a96eeafb72042b3f69afd21b4c9155dbfe7f97ab3dca392972ad531a075ac2 9639f7ebc6a6d69d7bf5b8bc869e7783a1406088f192868624ad8919e9b | Almost Half of Malware Samples Communicate Direct to IP Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 9639f7ebc6a6d69d7bf5b8bc869e7783a1406088f192868624ad8919e9bfd1d4 | eeafb72042b3f69afd21b4c9155dbfe7f97ab3dca392972ad531a075ac2 9639f7ebc6a6d69d7bf5b8bc869e7783a1406088f192868624ad8919e9bfd1d4 bf24277400cc453d530e4277d3bd24e96c5e409adef6970518bdc59205a | Almost Half of Malware Samples Communicate Direct to IP Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | bf24277400cc453d530e4277d3bd24e96c5e409adef6970518bdc59205aa0241 | 7ebc6a6d69d7bf5b8bc869e7783a1406088f192868624ad8919e9bfd1d4 bf24277400cc453d530e4277d3bd24e96c5e409adef6970518bdc59205aa0241 e310476c41ae4f6e3c4ed9bb88303ee6e5e1455bd7afe51cf48965ea759 | Almost Half of Malware Samples Communicate Direct to IP Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | cc43cdbe8eb9874f55fffbe23b560b673eb9f31fb9a953926bba29464fd2dd07 | characters Disassembly of associated malware samples (e.g., cc43cdbe8eb9874f55fffbe23b560b673eb9f31fb9a953926bba29464fd2dd07 ) confirms there are no hex-format IP addresses hard coded | Almost Half of Malware Samples Communicate Direct to IP Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | e310476c41ae4f6e3c4ed9bb88303ee6e5e1455bd7afe51cf48965ea7599e6e5 | 77400cc453d530e4277d3bd24e96c5e409adef6970518bdc59205aa0241 e310476c41ae4f6e3c4ed9bb88303ee6e5e1455bd7afe51cf48965ea7599e6e5 e3513922666c202c1ae5c06eea277ba10477868d6d89ce2819f4f8ff907 | Almost Half of Malware Samples Communicate Direct to IP Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | e3513922666c202c1ae5c06eea277ba10477868d6d89ce2819f4f8ff9070bc85 | 76c41ae4f6e3c4ed9bb88303ee6e5e1455bd7afe51cf48965ea7599e6e5 e3513922666c202c1ae5c06eea277ba10477868d6d89ce2819f4f8ff9070bc85 e5715e6611ef6bcb233f5d2098510dab3db408abbb728b00e1821bb2558 | Almost Half of Malware Samples Communicate Direct to IP Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | e5715e6611ef6bcb233f5d2098510dab3db408abbb728b00e1821bb255829373 | 922666c202c1ae5c06eea277ba10477868d6d89ce2819f4f8ff9070bc85 e5715e6611ef6bcb233f5d2098510dab3db408abbb728b00e1821bb255829373 A dditional Resources Phorpiex (Malware Family) – Malpedia | Almost Half of Malware Samples Communicate Direct to IP Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 0669c71740134323793429d10518576b42941f9eee0def6057ed9a4ba87a3a9a | b918e7 SHA1 741dbdb20d1beeb8ff809291996c8b78585cb812 SHA256 0669c71740134323793429d10518576b42941f9eee0def6057ed9a4ba87a3a9a File Type PE32 executable (DLL) (GUI) Intel 80386, for MS W | NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 3fee068bf90ffbeb25549eb52be0456609b1decfe91cda1967eb068ef2c8918f | c7e03d SHA1 67c05b3937d94136eda4a60a2d5fb685abc776a1 SHA256 3fee068bf90ffbeb25549eb52be0456609b1decfe91cda1967eb068ef2c8918f File Type PE32 executable (GUI) Intel 80386, for MS Windows | NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 66a0c294ee8f3507d723a376065798631906128ce79bd6dfd8f025eda6b75e51 | a285a9 SHA1 d13fc918433c705b49db74c91f56ae6c0cb5cf8d SHA256 66a0c294ee8f3507d723a376065798631906128ce79bd6dfd8f025eda6b75e51 Creator Windows User Created Date 2018-03-19 07:58:00 UTC L | NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | fb94a5e30de7afd1d9072ccedd90a249374f687f16170e1986d6fd43c143fb3a | c12e0f SHA1 3d161de48d3f4da0aefff685253404c8b0111563 SHA256 fb94a5e30de7afd1d9072ccedd90a249374f687f16170e1986d6fd43c143fb3a File Type PE32 executable (GUI) Intel 80386, for MS Windows | NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 0490e7d24defc2f0a4239e76197f1cba50e7ce4e092080d2f7db13ea0f88120b | 8c23c94489d2a166a429b8802d726298be7eb0c95585f2759cebad040cf 0490e7d24defc2f0a4239e76197f1cba50e7ce4e092080d2f7db13ea0f88120b OceanSalt Payload Samples 59b023b30d8a76c5984fe62d2e751875b | The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 0bb099849ed7076177aa8678de65393ef0d66e026ad5ab6805c1c47222f26358 | 40283372eb805df794ae700c25f789d77165bb98b7174ee03a617a566d4 0bb099849ed7076177aa8678de65393ef0d66e026ad5ab6805c1c47222f26358 f4c00cc0d7872fb756e2dc902f1a22d14885bf283c8e183a81b2927b363 | The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 1142dcc02b9ef34dca2f28c22613a0489a653eb0aeafe1370ca4c00200d479e0 | 434c302431734caf1d034c054ad80493c4c703d5aaeafa4a931a496b2ae 1142dcc02b9ef34dca2f28c22613a0489a653eb0aeafe1370ca4c00200d479e0 337b8c2aac80a44f4e7f253a149c65312bc952661169066fe1d4c113348 | The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 1c8351ff968f16ee904031f6fba8628af5ca0db01b9d775137076ead54155968 | f037a8f70d8fc3ee11a7bec98d6406a289e1372c8ce21cf00e55487dafc 1c8351ff968f16ee904031f6fba8628af5ca0db01b9d775137076ead54155968 2da750b50ac396a41e99752d791d106b686be10c27c6933f0d3afe762d6 | The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 22b16fa7af7b51880faceb33dd556242331daf7b7749cabd9d7c9735fb56aa10 | dddd05a2462e252997dc9d1ba09a9d9049df564d00070c7da36e526a66a 22b16fa7af7b51880faceb33dd556242331daf7b7749cabd9d7c9735fb56aa10 3869c738fa80b1e127f97c0afdb6c2e1c15115f183480777977b8422561 | The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 2547b958f7725539e9bba2a1852a163100daa1927bb621b2837bb88007857a48 | be267a05cbff83aec0f23d33dfe0c4cdc71f9a424f5a2e59ba62b7091de 2547b958f7725539e9bba2a1852a163100daa1927bb621b2837bb88007857a48 6c591dddd05a2462e252997dc9d1ba09a9d9049df564d00070c7da36e52 | The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 26fc6fa6acc942d186a31dc62be0de5e07d6201bdff5d7b2f1a7521d1d909847 | a0e0945c6daf3ebc8870e3bd37e54751f95162232d85dc0a0cc8bead9aa 26fc6fa6acc942d186a31dc62be0de5e07d6201bdff5d7b2f1a7521d1d909847 e218b19252f242a8f10990ddb749f34430d3d7697cbfb6808542f609d2c | The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 2da750b50ac396a41e99752d791d106b686be10c27c6933f0d3afe762d6d0c48 | 1ff968f16ee904031f6fba8628af5ca0db01b9d775137076ead54155968 2da750b50ac396a41e99752d791d106b686be10c27c6933f0d3afe762d6d0c48 5d1388c23c94489d2a166a429b8802d726298be7eb0c95585f2759cebad | The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 2efdd25a8a8f21c661aab2d4110cd7f89cf343ec6a8674ff20a37a1750708f27 | 331424bc1074512f12d7d98dc5d8c5028821dfcbe83f67f49743ae70652 2efdd25a8a8f21c661aab2d4110cd7f89cf343ec6a8674ff20a37a1750708f27 62886d8b9289bd92c9b899515ff0c12966b96dd3e4b69a00264da502482 | The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 337b8c2aac80a44f4e7f253a149c65312bc952661169066fe1d4c113348cc27b | cc02b9ef34dca2f28c22613a0489a653eb0aeafe1370ca4c00200d479e0 337b8c2aac80a44f4e7f253a149c65312bc952661169066fe1d4c113348cc27b 92b45e9a3f26b2eef4a86f3dae029f5821cffec78c6c64334055d75dbf2 | The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 3663e7b197efe91fb7879a56c29fb8ed196815e0145436ee2fad5825c29de897 | 3ed7fc664df4865840f39bfeaf9daeb3b88dcd921a90366635d59bc15f2 3663e7b197efe91fb7879a56c29fb8ed196815e0145436ee2fad5825c29de897 59b023b30d8a76c5984fe62d2e751875b8b3ebe2d520891458cb66a4e9c | The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 3869c738fa80b1e127f97c0afdb6c2e1c15115f183480777977b8422561980dd | fa7af7b51880faceb33dd556242331daf7b7749cabd9d7c9735fb56aa10 3869c738fa80b1e127f97c0afdb6c2e1c15115f183480777977b8422561980dd ba100e7bac8672b9fd73f2d0b7f419378f81ffb56830f6e27079cb4a064 | The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia Palo Alto Unit 42 | · Aug 17, 2026 |
| sha256 | 3cbccb059225669dcfdc7542ce28666e0b1a227714eaf4b16869808bffe90b96 | 6057a937573c099e3afe2d8e4b8ec8cb17e46583a2cab1a4ac4b8be1c97 3cbccb059225669dcfdc7542ce28666e0b1a227714eaf4b16869808bffe90b96 aef92be267a05cbff83aec0f23d33dfe0c4cdc71f9a424f5a2e59ba62b7 | The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia Palo Alto Unit 42 | · Aug 17, 2026 |
Extraction is regex-based (SHA-256/SHA-1/MD5, public IPv4, defanged hxxp/[.] indicators, and bare domains/emails only from malware, actor, exploit, phishing, ransomware and breach articles with a nearby indicator context word). Treat confidence as low until you verify against the source article.