← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
SteelFox Trojan imitates popular products to drop stealer and miner malware | Securelist
WHITE Tr1sa111 2024-11-11 Modified: 2024-12-11
29
IOCs
MEDIUM VOLUME
crimewareminerssltorrenttrojansteelfoxfoxit pdfwindowseditorautocadenckeyencivc2 serveraugustfebruarybaidu
Indicators of Compromise (29)
All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
CVE CVE-2020-14979 — 2024-11-11
CVE CVE-2021-41285 — 2024-11-11
FileHash-MD5 015595d7f868e249bbc1914be26ae81f — 2024-11-11
FileHash-MD5 040dede78bc1999ea62d1d044ea5e763 — 2024-11-11
FileHash-MD5 051269b1573f72a2355867a65979b485 — 2024-11-11
FileHash-MD5 08fa6ebc263001658473f6a968d8785b — 2024-11-11
FileHash-MD5 5029b1db994cd17f2669e73ce0a0b71a — 2024-11-11
FileHash-MD5 69a74c90d0298d2db34b48fa6c51e77d — 2024-11-11
FileHash-MD5 84b29b171541c8251651cabe1364b7b6 — 2024-11-11
FileHash-MD5 9dff2cdb371334619b15372aa3f6085c — 2024-11-11
FileHash-MD5 c20e1226782abdb120e814ee592bff1a — 2024-11-11
FileHash-MD5 c6e7c8c76c7fb05776a0b64699cdf6e7 — 2024-11-11
FileHash-MD5 d5290ba0cd8529032849ae567faba1ce — 2024-11-11
FileHash-MD5 d715507131bbf4ca1fe7bc4a5ddfeb19 — 2024-11-11
FileHash-MD5 dc8c18e4b729fdbf746252b2fc1decc5 — 2024-11-11
FileHash-MD5 dc9d42902bda8d63e5858b2a062aecc1 — 2024-11-11
FileHash-MD5 fb94950342360aa1656805f6dc23a1a0 — 2024-11-11
FileHash-SHA1 287e09c8ad36b93588e7eeb678a8d9e76c293cbb SHA1 of 5029b1db994cd17f2669e73ce0a0b71a 2024-11-11
FileHash-SHA1 993d944aa84e851c48f960cf018e4abe18ec5cd9 SHA1 of c20e1226782abdb120e814ee592bff1a 2024-11-11
FileHash-SHA1 ea651af34bfe2052668e37bcd3f60696ebaffa1c SHA1 of 9dff2cdb371334619b15372aa3f6085c 2024-11-11
FileHash-SHA256 3e52c0b97f67287c212e5bc779b0e7dd843fb0df2ef11b74e1891898d492782c SHA256 of 9dff2cdb371334619b15372aa3f6085c 2024-11-11
FileHash-SHA256 8d9abb726799da54909ebd7a9c356b990fd68175945e6c05e64de18ca7d1d3d8 SHA256 of 5029b1db994cd17f2669e73ce0a0b71a 2024-11-11
FileHash-SHA256 9954fd4e914f2427c25ba0a4b3d305819a71d648b05fc94d108c0459795f077d SHA256 of c20e1226782abdb120e814ee592bff1a 2024-11-11
URL https://ankjdans.xyz — 2024-11-11
URL https://squarecircle.ru/Intelij/jetbrains-activator.exe — 2024-11-11
URL https://www.cloudstaymoon.com/2024/05/06/tools-1 — 2024-11-11
domain ankjdans.xyz — 2024-11-11
domain squarecircle.ru — 2024-11-11
hostname www.cloudstaymoon.com — 2024-11-11
References (1)
↗ https://securelist.com/steelfox-trojan-drops-stealer-and-miner/114414/