← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Phishing and Malware URLs Exploiting Recent CrowdStrike Incident
Here is the full text of the HijackLoader, which has been used by hackers to launch the attack on the UK's largest online market, Crowdstrike, in the wake of last week's attack.
Indicators of Compromise (37)
| TYPE | INDICATOR | DESCRIPTION | CREATED | |
|---|---|---|---|---|
| FileHash-MD5 | 21068dfd733435c866312d35b9432733 | MD5 of 835f1141ece59c36b18e76927572d229136aeb12eff44cb4ba98d7808257c299 | 2024-07-20 | |
| FileHash-MD5 | 371c165e3e3c1a000051b78d7b0e7e79 | MD5 of 5ae3838d77c2102766538f783d0a4b4205e7d2cdba4e0ad2ab332dc8ab32fea9 | 2024-07-20 | |
| FileHash-MD5 | 7daa2b7fe529b45101a399b5ebf0a416 | MD5 of 2bdf023c439010ce0a786ec75d943a80a8f01363712bbf69afc29d3e2b5306ed | 2024-07-20 | |
| FileHash-MD5 | 84bc072f8ea30746f0982afbda3c638f | MD5 of 52019f47f96ca868fa4e747c3b99cba1b7aa57317bf8ebf9fcbf09aa576fe006 | 2024-07-20 | |
| FileHash-MD5 | 9d255e04106ba7dcbd0bcb549e9a5a4e | MD5 of 02f37a8e3d1790ac90c04bc50de73cd1a93e27caf833a1e1211b9cc6294ecee5 | 2024-07-20 | |
| FileHash-MD5 | da03ebd2a8448f53d1bd9e16fc903168 | MD5 of d6d5ff8e9dc6d2b195a6715280c2f1ba471048a7ce68d256040672b801fda0ea | 2024-07-20 | |
| FileHash-SHA1 | 2a2ecbbd4840c486b3507a18307369336ec5a1aa | SHA1 of 5ae3838d77c2102766538f783d0a4b4205e7d2cdba4e0ad2ab332dc8ab32fea9 | 2024-07-20 | |
| FileHash-SHA1 | 3d5336c676d3dd94500d0d2fe853b9de457f10fd | SHA1 of 835f1141ece59c36b18e76927572d229136aeb12eff44cb4ba98d7808257c299 | 2024-07-20 | |
| FileHash-SHA1 | 889b4f487d8bba6af6ff6eb7f5afd74957586c49 | SHA1 of d6d5ff8e9dc6d2b195a6715280c2f1ba471048a7ce68d256040672b801fda0ea | 2024-07-20 | |
| FileHash-SHA1 | a9becb85b181c37ee5a940e149754c1912a901f1 | SHA1 of 02f37a8e3d1790ac90c04bc50de73cd1a93e27caf833a1e1211b9cc6294ecee5 | 2024-07-20 | |
| FileHash-SHA1 | f39343933ff3fc7934814d6d3b7b098bc92540a0 | SHA1 of 52019f47f96ca868fa4e747c3b99cba1b7aa57317bf8ebf9fcbf09aa576fe006 | 2024-07-20 | |
| FileHash-SHA1 | fd73f3561d0cebe341a6c380681fb08841fa5ce6 | SHA1 of 2bdf023c439010ce0a786ec75d943a80a8f01363712bbf69afc29d3e2b5306ed | 2024-07-20 | |
| FileHash-SHA256 | 02f37a8e3d1790ac90c04bc50de73cd1a93e27caf833a1e1211b9cc6294ecee5 | — | 2024-07-20 | |
| FileHash-SHA256 | 2bdf023c439010ce0a786ec75d943a80a8f01363712bbf69afc29d3e2b5306ed | — | 2024-07-20 | |
| FileHash-SHA256 | 4f450abaa4daf72d974a830b16f91deed77ba62412804dca41a6d42a7d8b6fd0 | — | 2024-07-20 | |
| FileHash-SHA256 | 52019f47f96ca868fa4e747c3b99cba1b7aa57317bf8ebf9fcbf09aa576fe006 | — | 2024-07-20 | |
| FileHash-SHA256 | 5ae3838d77c2102766538f783d0a4b4205e7d2cdba4e0ad2ab332dc8ab32fea9 | — | 2024-07-20 | |
| FileHash-SHA256 | 6010e2147a0f51a7bfa2f942a5a9eaad9a294f463f717963b486ed3f53d305c2 | — | 2024-07-20 | |
| FileHash-SHA256 | 835f1141ece59c36b18e76927572d229136aeb12eff44cb4ba98d7808257c299 | — | 2024-07-20 | |
| FileHash-SHA256 | 931308cfe733376e19d6cd2401e27f8b2945cec0b9c696aebe7029ea76d45bf6 | — | 2024-07-20 | |
| FileHash-SHA256 | b1fcb0339b9ef4860bb1ed1e5ba0e148321be64696af64f3b1643d1311028cb3 | — | 2024-07-20 | |
| FileHash-SHA256 | b6f321a48812dc922b26953020c9a60949ec429a921033cfaf1e9f7d088ee628 | — | 2024-07-20 | |
| FileHash-SHA256 | be074196291ccf74b3c4c8bd292f92da99ec37a25dc8af651bd0ba3f0d020349 | — | 2024-07-20 | |
| FileHash-SHA256 | c44506fe6e1ede5a104008755abf5b6ace51f1a84ad656a2dccc7f2c39c0eca2 | — | 2024-07-20 | |
| FileHash-SHA256 | d6d5ff8e9dc6d2b195a6715280c2f1ba471048a7ce68d256040672b801fda0ea | — | 2024-07-20 | |
| domain | crashstrike.com | — | 2024-07-20 | |
| domain | crowdfalcon-immed-update.com | — | 2024-07-20 | |
| domain | crowdstrike-bsod.com | — | 2024-07-20 | |
| domain | crowdstrike-helpdesk.com | — | 2024-07-20 | |
| domain | crowdstrike0day.com | — | 2024-07-20 | |
| domain | crowdstrikebluescreen.com | — | 2024-07-20 | |
| domain | crowdstrikedoomsday.com | — | 2024-07-20 | |
| domain | crowdstrikedown.site | — | 2024-07-20 | |
| domain | crowdstrikeoutage.info | — | 2024-07-20 | |
| domain | fix-crowdstrike-apocalypse.com | — | 2024-07-20 | |
| domain | fix-crowdstrike-bsod.com | — | 2024-07-20 | |
| domain | rowdstrikefix.com | — | 2024-07-20 |