← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
New BugSleep Backdoor Deployed in Recent MuddyWater Campaigns - Check Point Research
WHITE CyberHunter_NL 2024-07-16 Modified: 2024-08-15
105
IOCs
HIGH VOLUME
bugsleepmuddywaterisraelsaudi arabiaazerbaijanegnytepdf attachmentministryintelligencesecuritytoolsfebruarycodevirustotal
Indicators of Compromise (23 / 105 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain URL hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 0993e8ffdc69c202e56b8070a0ceb8cd MD5 of 20aaeac4dbea89b50d011e9becdf51afc1a1a1f254a5f494b80c108fd3c7f61a 2024-07-16
FileHash-MD5 1986e572654593df8e08ff69bb284dc6 MD5 of 88788208316a6cf4025dbabbef703f51d77d475dc735bf826b8d4a13bbd6a3ee 2024-07-16
FileHash-MD5 242098c3e87822bffa7c337987065fbe MD5 of 39da7cc7c627ea4c46f75bcec79e5669236e6b43657dcad099e1b9214527670e 2024-07-16
FileHash-MD5 4d5ca8c51171d9d9b944d9c4b2cd6e61 MD5 of 4064e4bb9a4254948047858301f2b75e276a878321b0cc02710e1738b42548ca 2024-07-16
FileHash-MD5 7675b919678e71e01c145f79c6452607 MD5 of 31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab 2024-07-16
FileHash-MD5 7b88765f265124a80a443a353493b88e MD5 of c88453178f5f6aaab0cab2e126b0db27b25a5cfe6905914cc430f6f100b7675c 2024-07-16
FileHash-MD5 9c63b57d1250cd89fbd82ae2b4062aa3 MD5 of e7896ccb82ae35e1ee5949b187839faab0b51221d510b25882bbe711e57c16d2 2024-07-16
FileHash-MD5 a24d25af9985c28cb0d93443cc899aa2 MD5 of c80c8dd7be3ccf18e327355b880afb5a24d5a0596939458fb13319e05c4d43e9 2024-07-16
FileHash-MD5 a46206daae98334e47e178bc718d9baf MD5 of 424a9c85f97aa1aece9480bd658266c366a60ff1d62c31b87ddc15a1913c10e4 2024-07-16
FileHash-MD5 a50a20edddaded453410600549968914 MD5 of 94278fa01900fdbfb58d2e373895c045c69c01915edc5349cd6f3e5b7130c472 2024-07-16
FileHash-MD5 a713e686fd984588a4db74f34bf32275 MD5 of 960d4c9e79e751be6cad470e4f8e1d3a2b11f76f47597df8619ae41c96ba5809 2024-07-16
FileHash-MD5 af6d4ffcaf5d3dab814d16429cb76754 MD5 of 55af6a90ac8863f27b3fcaa416a0f1e4ff02fb42aa46a7274c6b76aa000aacc2 2024-07-16
FileHash-MD5 b77259eb3279ef1f5eb7cfae7d818ff1 MD5 of 1c0947258ddb608c879333c941f0738a7f279bc14630f2c8877b82b8046acf91 2024-07-16
FileHash-MD5 b868885719d2244fc2eee84200f456c7 MD5 of 7e14ca8cb7980e85aff4038f489442eace33530fd02e2b9c382a4b6907601bee 2024-07-16
FileHash-MD5 c17f4bb8e415e21e6010b98e13c6dff3 MD5 of b8703744744555ad841f922995cef5dbca11da22565195d05529f5f9095fbfca 2024-07-16
FileHash-MD5 c381c2cb8fdd6acf1636280b9424f573 MD5 of ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909 2024-07-16
FileHash-MD5 c8f6081c824d17c5efba58def4d7e33a MD5 of c23f17b92b13464a570f737a86c0960d5106868aaa5eac2f2bac573c3314eb0f 2024-07-16
FileHash-MD5 d1e400e1e8100872d1f0f6a4f99eb51d MD5 of 90f94d98386c179a1b98a1f082b0c7487b22403d8d5eb3db6828725d14392ded 2024-07-16
FileHash-MD5 d783001d1f98fe3b33e7b97b0b7d96dc MD5 of 73c677dd3b264e7eb80e26e78ac9df1dba30915b5ce3b1bc1c83db52b9c6b30e 2024-07-16
FileHash-MD5 dab63e3d8fdc6800c983430e25bce791 MD5 of fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a 2024-07-16
FileHash-MD5 e7df84a5a22aeafcf1c3abf4fd986c91 MD5 of 5df724c220aed7b4878a2a557502a5cefee736406e25ca48ca11a70608f3a1c0 2024-07-16
FileHash-MD5 f9ffe8ec3d808da08bc335583a0631ce MD5 of 7e6b04e17ae273700cef4dc08349af949dbd4d3418159d607529ae31285e18f7 2024-07-16
FileHash-MD5 fc3f730f2253db14076fa2e3c37aeb1b MD5 of 8fbd374d4659efdc5b5a57ff4168236aeaab6dae4af6b92d99ac28e05f04e5c1 2024-07-16
References (1)
↗ https://research.checkpoint.com/2024/new-bugsleep-backdoor-deployed-in-recent-muddywater-campaigns/