← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Supply Chain Compromise Campaign Targeting 3CXDesktopApp Customers
WHITE Tr1sa111 2023-04-05 Modified: 2023-04-05
277
IOCs
HIGH VOLUME
3CXDesktopAppSupply Chain Compromise
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (51 / 277 total)
All domain FileHash-SHA1 FileHash-MD5 FileHash-SHA256 URL email
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 aa4e398b3bd8645016d8090ffc77d15f926a8e69258642191deb4e68688ff973 — 2023-04-05
FileHash-SHA256 59e1edf4d82fae4978e97512b0331b7eb21dd4b838b850ba46794d9c7a2c0983 — 2023-04-05
FileHash-SHA256 aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 SHA256 of bea77d1e59cf18dce22ad9a2fad52948fd7a9efa 2023-04-05
FileHash-SHA256 dde03348075512796241389dfea5560c20a3d2a2eac95c894e7bbed5e85a0acc — 2023-04-05
FileHash-SHA256 fad482ded2e25ce9e1dd3d3ecc3227af714bdfbbde04347dbc1b21d6a3670405 — 2023-04-05
FileHash-SHA256 11be1803e2e307b647a8a7e02d128335c448ff741bf06bf52b332e0bbf423b03 — 2023-04-05
FileHash-SHA256 4e08e4ffc699e0a1de4a5225a0b4920933fbb9cf123cde33e1674fde6d61444f — 2023-04-05
FileHash-SHA256 59e1edf4d82fae4978e97512b0331b7eb21dd4b838b850ba46794d9c7a2c0983 — 2023-04-05
FileHash-SHA256 7986bbaee8940da11ce089383521ab420c443ab7b15ed42aed91fd31ce833896 — 2023-04-05
FileHash-SHA256 aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 — 2023-04-05
FileHash-SHA256 c485674ee63ec8d4e8fde9800788175a8b02d3f9416d0e763360fff7f8eb4e02 — 2023-04-05
FileHash-SHA256 a64fa9f1c76457ecc58402142a8728ce34ccba378c17318b3340083eeb7acc67 SHA256 of 769383fc65d1386dd141c960c9970114547da0c2 2023-04-05
FileHash-SHA256 a60a61bf844bc181d4540c9fac53203250a982e7c3ad6153869f01e19cc36203 — 2023-04-05
FileHash-SHA256 54004dfaa48ca5fa91e3304fb99559a2395301c570026450882d6aad89132a02 — 2023-04-05
FileHash-SHA256 5407cda7d3a75e7b1e030b1f33337a56f293578ffa8b3ae19c671051ed314290 — 2023-04-05
FileHash-SHA256 59e1edf4d82fae4978e97512b0331b7eb21dd4b838b850ba46794d9c7a2c0983 — 2023-04-05
FileHash-SHA256 5d99efa36f34aa6b43cd81e77544961c5c8d692c96059fef92c2df2624550734 — 2023-04-05
FileHash-SHA256 92005051ae314d61074ed94a52e76b1c3e21e7f0e8c1d1fdd497a006ce45fa61 — 2023-04-05
FileHash-SHA256 a60a61bf844bc181d4540c9fac53203250a982e7c3ad6153869f01e19cc36203 — 2023-04-05
FileHash-SHA256 aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 — 2023-04-05
FileHash-SHA256 b86c695822013483fa4e2dfdf712c5ee777d7b99cbad8c2fa2274b133481eadb — 2023-04-05
FileHash-SHA256 d45674f941be3cca2fbc1af42778043cc18cd86d95a2ecb9e6f0e212ed4c74ae — 2023-04-05
FileHash-SHA256 e6bbc33815b9f20b0cf832d7401dd893fbc467c800728b5891336706da0dbcec — 2023-04-05
FileHash-SHA256 11be1803e2e307b647a8a7e02d128335c448ff741bf06bf52b332e0bbf423b03 SHA256 of 20d554a80d759c50d6537dd7097fed84dd258b3e 2023-04-05
FileHash-SHA256 54004dfaa48ca5fa91e3304fb99559a2395301c570026450882d6aad89132a02 SHA256 of 480dc408ef50be69ebcf84b95750f7e93a8a1859 2023-04-05
FileHash-SHA256 5407cda7d3a75e7b1e030b1f33337a56f293578ffa8b3ae19c671051ed314290 SHA256 of 19f4036f5cd91c5fc411afc4359e32f90caddaac 2023-04-05
FileHash-SHA256 59e1edf4d82fae4978e97512b0331b7eb21dd4b838b850ba46794d9c7a2c0983 SHA256 of bfecb8ce89a312d2ef4afc64a63847ae11c6f69e 2023-04-05
FileHash-SHA256 7986bbaee8940da11ce089383521ab420c443ab7b15ed42aed91fd31ce833896 SHA256 of bf939c9c261d27ee7bb92325cc588624fca75429 2023-04-05
FileHash-SHA256 8ab3a5eaaf8c296080fadf56b265194681d7da5da7c02562953a4cb60e147423 — 2023-04-05
FileHash-SHA256 92005051ae314d61074ed94a52e76b1c3e21e7f0e8c1d1fdd497a006ce45fa61 SHA256 of 5d833bcc679db38a45111269e727ec58b75c8d31 2023-04-05
FileHash-SHA256 a60a61bf844bc181d4540c9fac53203250a982e7c3ad6153869f01e19cc36203 SHA256 of 413d9cbfcbf8d1e8304eab0aa5484f5eec5185f5 2023-04-05
FileHash-SHA256 a64fa9f1c76457ecc58402142a8728ce34ccba378c17318b3340083eeb7acc67 SHA256 of 769383fc65d1386dd141c960c9970114547da0c2 2023-04-05
FileHash-SHA256 aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 SHA256 of bea77d1e59cf18dce22ad9a2fad52948fd7a9efa 2023-04-05
FileHash-SHA256 b86c695822013483fa4e2dfdf712c5ee777d7b99cbad8c2fa2274b133481eadb SHA256 of f3487a1324f4c11b35504751a5527bc60eb95382 2023-04-05
FileHash-SHA256 dde03348075512796241389dfea5560c20a3d2a2eac95c894e7bbed5e85a0acc — 2023-04-05
FileHash-SHA256 e6bbc33815b9f20b0cf832d7401dd893fbc467c800728b5891336706da0dbcec — 2023-04-05
FileHash-SHA256 fad482ded2e25ce9e1dd3d3ecc3227af714bdfbbde04347dbc1b21d6a3670405 — 2023-04-05
FileHash-SHA256 11be1803e2e307b647a8a7e02d128335c448ff741bf06bf52b332e0bbf423b03 SHA256 of 20d554a80d759c50d6537dd7097fed84dd258b3e 2023-04-05
FileHash-SHA256 54004dfaa48ca5fa91e3304fb99559a2395301c570026450882d6aad89132a02 SHA256 of 480dc408ef50be69ebcf84b95750f7e93a8a1859 2023-04-05
FileHash-SHA256 5407cda7d3a75e7b1e030b1f33337a56f293578ffa8b3ae19c671051ed314290 SHA256 of 19f4036f5cd91c5fc411afc4359e32f90caddaac 2023-04-05
FileHash-SHA256 59e1edf4d82fae4978e97512b0331b7eb21dd4b838b850ba46794d9c7a2c0983 SHA256 of bfecb8ce89a312d2ef4afc64a63847ae11c6f69e 2023-04-05
FileHash-SHA256 7986bbaee8940da11ce089383521ab420c443ab7b15ed42aed91fd31ce833896 SHA256 of bf939c9c261d27ee7bb92325cc588624fca75429 2023-04-05
FileHash-SHA256 8ab3a5eaaf8c296080fadf56b265194681d7da5da7c02562953a4cb60e147423 — 2023-04-05
FileHash-SHA256 92005051ae314d61074ed94a52e76b1c3e21e7f0e8c1d1fdd497a006ce45fa61 SHA256 of 5d833bcc679db38a45111269e727ec58b75c8d31 2023-04-05
FileHash-SHA256 a60a61bf844bc181d4540c9fac53203250a982e7c3ad6153869f01e19cc36203 SHA256 of 413d9cbfcbf8d1e8304eab0aa5484f5eec5185f5 2023-04-05
FileHash-SHA256 a64fa9f1c76457ecc58402142a8728ce34ccba378c17318b3340083eeb7acc67 SHA256 of 769383fc65d1386dd141c960c9970114547da0c2 2023-04-05
FileHash-SHA256 aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 SHA256 of bea77d1e59cf18dce22ad9a2fad52948fd7a9efa 2023-04-05
FileHash-SHA256 b86c695822013483fa4e2dfdf712c5ee777d7b99cbad8c2fa2274b133481eadb SHA256 of f3487a1324f4c11b35504751a5527bc60eb95382 2023-04-05
FileHash-SHA256 dde03348075512796241389dfea5560c20a3d2a2eac95c894e7bbed5e85a0acc — 2023-04-05
FileHash-SHA256 e6bbc33815b9f20b0cf832d7401dd893fbc467c800728b5891336706da0dbcec — 2023-04-05
FileHash-SHA256 fad482ded2e25ce9e1dd3d3ecc3227af714bdfbbde04347dbc1b21d6a3670405 — 2023-04-05
References (7)
↗ https://www.crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/ ↗ https://news.sophos.com/en-us/2023/03/29/3cx-dll-sideloading-attack/ ↗ https://objective-see.org/blog/blog_0x73.html ↗ https://www.sentinelone.com/blog/smoothoperator-ongoing-campaign-trojanizes-3cx-software-in-software-supply-chain-attack/ ↗ https://www.huntress.com/blog/3cx-voip-software-compromise-supply-chain-threats ↗ https://www.3cx.com/blog/news/desktopapp-security-alert/ ↗ https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/trustwave-action-response-supply-chain-attack-using-3cx-pbax-software/