← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
IMPERIAL KITTEN Deploys Novel Malware Families
WHITE Deploys Novel CyberHunter_NL 2023-11-29 Modified: 2023-12-29
30
IOCs
MEDIUM VOLUME
CrowdStrike Intelligence has identified an Iran-nexus adversary as the subject of a series of cyberattacks and strategic web compromise operations in the Middle East between 2023 and 2028, as well as a range of other targets.
imperial kittenimaploadersha256 hashcomputersip addressdiscordkittenuuidcrowdstrikeintelligencepaexecpythonsugarrushlaternetscanprocdumpicmpdeploys novel
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
IMAPLoader Python
Indicators of Compromise (30)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain email hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 6d02207c9ce1b3967077065c40eb1bb1 MD5 of 32c40964f75c3e7b81596d421b5cefd0ac328e01370d0721d7bfac86a2e98827 2023-11-29
FileHash-SHA1 01b4ed3e7d026f9b9038e93bb3313602256aaf2f SHA1 of 32c40964f75c3e7b81596d421b5cefd0ac328e01370d0721d7bfac86a2e98827 2023-11-29
FileHash-SHA256 1605b2aa6a911debf26b58fd3fa467766e215751377d4f746189566067dd5929 — 2023-11-29
FileHash-SHA256 32c40964f75c3e7b81596d421b5cefd0ac328e01370d0721d7bfac86a2e98827 — 2023-11-29
FileHash-SHA256 3bba5e32f142ed1c2f9d763765e9395db5e42afe8d0a4a372f1f429118b71446 — 2023-11-29
FileHash-SHA256 5c945a2be61f1f86da618a6225bc9d84f05f2c836b8432415ff5cc13534cfe2e — 2023-11-29
FileHash-SHA256 87ccd1c15adc9ba952a07cd89295e0411b72cd4653b168f9b3f26c7a88d19b91 — 2023-11-29
FileHash-SHA256 989373f2d295ba1b8750fee7cdc54820aa0cb42321cec269271f0020fa5ea006 — 2023-11-29
FileHash-SHA256 b588058e831d3a8a6c5983b30fc8d8aa5a711b5dfe9a7e816fe0307567073aed — 2023-11-29
FileHash-SHA256 cc7120942edde86e480a961fceff66783e71958684ad1307ffbe0e97070fd4fd — 2023-11-29
FileHash-SHA256 d3677394cb45b0eb7a7f563d2032088a8a10e12048ad74bae5fd9482f0aead01 — 2023-11-29
FileHash-SHA256 fa54988c11aa1109ff64a2ab7a7e0eeec8e4635e96f6c30950f4fbdcd2bba336 — 2023-11-29
domain analytics-service.cloud — 2023-11-29
domain analytics-service.online — 2023-11-29
domain blackcrocodile.online — 2023-11-29
domain cdn-analytics.co — 2023-11-29
domain cdnpakage.com — 2023-11-29
domain fastanalizer.live — 2023-11-29
domain fastanalytics.live — 2023-11-29
domain hotjar.info — 2023-11-29
domain jquery-cdn.online — 2023-11-29
domain jquery-code-download.online — 2023-11-29
domain jquery-stack.online — 2023-11-29
domain pentestlaboratories.com — 2023-11-29
domain prostatistics.live — 2023-11-29
domain updatenewnet.com — 2023-11-29
email itdep@update-platform-check.online — 2023-11-29
email office@update-platform-check.online — 2023-11-29
hostname cdn.jguery.org — 2023-11-29
hostname link.mymana.ir — 2023-11-29
References (1)
↗ https://www.crowdstrike.com/blog/imperial-kitten-deploys-novel-malware-families/