← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Ducktail malware spreading through fake clothing job ads
WHITE AlienVault 2023-11-10 Modified: 2023-11-10
27
IOCs
MEDIUM VOLUME
Ducktail is a malware family that has been active since the second half of 2021 and aims to steal Facebook business accounts.
browser pluginsfacebookmalwaretrojantrojan-stealerducktailgoogle chromedelphiphishing
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Ducktail
Indicators of Compromise (27)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 017f6cfa19aa01380c32e3ef0ece27bc MD5 of bde696a0ae901864716320e3111d5aa49cba3b1d9375dce2903f7433a287b2f2 2023-11-10
FileHash-MD5 570b64e953bc1263ac2f005f53569ac0 MD5 of 04dd228d0b088c4116b503c31de22c1746054226a533286bec3a3d0606d73119 2023-11-10
FileHash-MD5 c8c598f4a00c442f3bc7ab944fd601df MD5 of 2b3decf08bf9223fb3e3057b5a477d35e62c0b5795a883ceaa9555ca7c28252f 2023-11-10
FileHash-SHA1 5216dc54a8a481d05810a4f1434c1924d379d07b SHA1 of bde696a0ae901864716320e3111d5aa49cba3b1d9375dce2903f7433a287b2f2 2023-11-10
FileHash-SHA1 6151c76874f5a1e14d82ec083fe5ae28b0c6dd98 SHA1 of 2b3decf08bf9223fb3e3057b5a477d35e62c0b5795a883ceaa9555ca7c28252f 2023-11-10
FileHash-SHA1 a513bc9942e610058a3b261600ad25d9d3521d29 SHA1 of 04dd228d0b088c4116b503c31de22c1746054226a533286bec3a3d0606d73119 2023-11-10
FileHash-SHA256 04dd228d0b088c4116b503c31de22c1746054226a533286bec3a3d0606d73119 — 2023-11-10
FileHash-SHA256 06afd110d91419ece0114a7fdeaeba4e79fbc9f2a0450da8b4f264e4ae073a26 — 2023-11-10
FileHash-SHA256 1117a93b4b4b78e4d5d6bd79f5f0e04926759558218df30e868464f05bf1bd3d — 2023-11-10
FileHash-SHA256 2b3decf08bf9223fb3e3057b5a477d35e62c0b5795a883ceaa9555ca7c28252f — 2023-11-10
FileHash-SHA256 554353cda0989c3a141c2ab0d0db06393e4f3fd201727e8cf2ed8d136f87d144 — 2023-11-10
FileHash-SHA256 64f6cbe9adf91bc4ed457c79643d764a130b0d25364817c8b6da17b03ff91aa7 — 2023-11-10
FileHash-SHA256 655a8ea3bc1baff01639dcdc43a294f8a5dc622e543d8f51e9d51c6eaaae6f6e — 2023-11-10
FileHash-SHA256 69257876e2ec5bdbe7114d6ce209f13afbfddb2af0006a6d17e6e91578966870 — 2023-11-10
FileHash-SHA256 7da7ca7fcbc6e8bc22b420f82ae5756ecd3ad094b8ebcbd5a78a2362eb87b226 — 2023-11-10
FileHash-SHA256 89f016d32707f096cc8daf674e5a9fc2ba6cf731d610f5303d997fc848645788 — 2023-11-10
FileHash-SHA256 b9a984383a5825868c23bc3afdc70e3af2a56d26d002431940d2429c8e88ace9 — 2023-11-10
FileHash-SHA256 bde696a0ae901864716320e3111d5aa49cba3b1d9375dce2903f7433a287b2f2 — 2023-11-10
FileHash-SHA256 c6ae36e28668c6132da4d08bca7ceb13adf576fa1dbdb0a708d9b3b0f140dd03 — 2023-11-10
FileHash-SHA256 c82b959d43789d3dbf5115629c3c01fa8dd599fbec36df0f4bc5d0371296545a — 2023-11-10
FileHash-SHA256 d03e1a0fce0b112bba4d56380c8d1be671845dd3ed90ec847635ba6015bad84d — 2023-11-10
FileHash-SHA256 d4f10bd162ee77f4778ecc156921f5949cd2d64aab45b31d6050f446e59aed5a — 2023-11-10
FileHash-SHA256 da13db80b0f3c25b512a1692494f303eff1ff1778a837208f79e2f3c81f8192e — 2023-11-10
domain cavoisatthu2023asd.com — 2023-11-10
domain dauhetdau.com — 2023-11-10
domain motdanvoi20232023.com — 2023-11-10
domain voiconprivatesv2083.com — 2023-11-10
References (1)
↗ https://securelist.com/ducktail-fashion-week/111017/