← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Unveiling WolfsBane: Gelsemium’s Linux counterpart to Gelsevirine
WHITE Gelsemium Tr1sa111 2024-12-17 Modified: 2024-12-22
137
IOCs
HIGH VOLUME
linuxwolfsbanerootkitaptbackdoorpersistencegelsevirinecyberespionageproject woodfirewood
MITRE ATT&CK & Malware Families
MALWARE FAMILIES
WolfsBane FireWood Gelsemium - S0666 Gelsevirine Gelsenicine Gelsemine Project Wood
Indicators of Compromise (70 / 137 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 029407c923c279803c6d7cbc7673936bca2e580c — 2024-12-17
FileHash-SHA1 0471e1a214f458d4c478677ec9896b0f31207377 — 2024-12-17
FileHash-SHA1 055f1e13e0fea44dc42e8cd8c9219ed588360304 — 2024-12-17
FileHash-SHA1 0ab53321bb9699d354a032259423175c08fec1a4 — 2024-12-17
FileHash-SHA1 0cedfb1789ef139b6040cf8d84ba130360c4eb7d — 2024-12-17
FileHash-SHA1 0fef89711da11c550d3914debc0e663f5d2fb86c — 2024-12-17
FileHash-SHA1 1042c798d7ff69eb52cbeae684c74fc0ee84aacd — 2024-12-17
FileHash-SHA1 1dd4e8119efb34beaec6af55b66222d3dc5036eb — 2024-12-17
FileHash-SHA1 209c4994a42af7832f526e09238fb55d5aab34e5 — 2024-12-17
FileHash-SHA1 21c9b87a8cf75deba6cff8cf66aa015d6fb46be2 — 2024-12-17
FileHash-SHA1 225fa75d48c7699c3961db1904993e39ae051940 — 2024-12-17
FileHash-SHA1 238c8e8eb7a732d85d8a7f7ca40b261d8ae4183d — 2024-12-17
FileHash-SHA1 239db66faa803772f2a8905b1e77377a5bf78351 — 2024-12-17
FileHash-SHA1 2668050fcad373fcd548792d9793375e4d704bef — 2024-12-17
FileHash-SHA1 2b03ffe35090ce5f9341e046464c9eed8a64441d — 2024-12-17
FileHash-SHA1 2d6ceaf73ea7f70135d9a82a397625c89c408f05 — 2024-12-17
FileHash-SHA1 2f795d69641312b6653b59c2653d7bf368a4405f — 2024-12-17
FileHash-SHA1 366a9e646a167fcd2381bc15905f7d7a5e76a100 — 2024-12-17
FileHash-SHA1 36e46ad4a9f31634d32b26bdba618df5ecdca188 — 2024-12-17
FileHash-SHA1 374c38e11c50f5eddd8f3708c557529a62446a4e — 2024-12-17
FileHash-SHA1 39d7bbf6b95fa8bf37fe434dc6efe380bbf9ab23 — 2024-12-17
FileHash-SHA1 43d27a9c57d252999259aafee9760bda00d1207d — 2024-12-17
FileHash-SHA1 43eec66f6d68f286357004dc62d6da01991a2eb8 — 2024-12-17
FileHash-SHA1 44947903b2bc760ac2e736b25574be33bf7af40b — 2024-12-17
FileHash-SHA1 47e0bc09b9b092bf5de415e663bd848917ea8303 — 2024-12-17
FileHash-SHA1 4a932622a1a5259e9c97ebfa8dc11fa84dffe039 — 2024-12-17
FileHash-SHA1 544717ef96a59135cd0a93886c273e3ffe702c1a — 2024-12-17
FileHash-SHA1 5eacce21513d29a6f318b338d3ee39cc2752f72b — 2024-12-17
FileHash-SHA1 600c59733444bc8a5f71d41365368f3002465b10 — 2024-12-17
FileHash-SHA1 625e0d33966e4060d57c1daca5eb6d1a51bba3c3 — 2024-12-17
FileHash-SHA1 6ae33a9df4e7d5d19c67edc1d1b73c1674ff5fc1 — 2024-12-17
FileHash-SHA1 6edbf71680f11681eea34be293f5c580de2e16e0 — 2024-12-17
FileHash-SHA1 6f22c761898a3db9a3788967d90a77331dfa66b3 — 2024-12-17
FileHash-SHA1 6f23354186659cd2a02a5521b39f6246199d83af — 2024-12-17
FileHash-SHA1 6f43fe80806a3fe5c866c0b63cc5b105a85d0e75 — 2024-12-17
FileHash-SHA1 72db8d1e3472150c1be93b68f53f091aacc2234d — 2024-12-17
FileHash-SHA1 762f73329ff2ebe2b8f55205f886cb5f1de99483 — 2024-12-17
FileHash-SHA1 78102e569c4f40d011d941bdd8fcaab508edacd6 — 2024-12-17
FileHash-SHA1 796ebb4074dde56fc1edefed0628db68b0857e8a — 2024-12-17
FileHash-SHA1 7b79c0c0e6d9d1760005416a463beea4518b822c — 2024-12-17
FileHash-SHA1 7e5bf24946c77a96532da6fd09eaa1ec4e6f1a91 — 2024-12-17
FileHash-SHA1 8090d015d6770e6826f3a9266dd3b0998d30ddc3 — 2024-12-17
FileHash-SHA1 843d6b0054d066845628e2d5db95201b20e12cd2 — 2024-12-17
FileHash-SHA1 8532eca04c0f58172d80d8a446ae33907d509377 — 2024-12-17
FileHash-SHA1 85528eac10090ae743bcf102b4ae7007b6468255 — 2024-12-17
FileHash-SHA1 88e4679e9a47a51bd82dc22460b5a69fd7d12acc — 2024-12-17
FileHash-SHA1 8ab3acc8a3f89e5b8e7a1929149d273eddadae64 — 2024-12-17
FileHash-SHA1 8bf0cab4a700bed3e5d7d38c8868d4f388df9a54 — 2024-12-17
FileHash-SHA1 988a70df8a39034ce817d6b968e48103d824a426 — 2024-12-17
FileHash-SHA1 9a2daf6cf400408f1714ef9ba659f7491bdab612 — 2024-12-17
FileHash-SHA1 9c99eb944db0797682d54a57e2782956223e9bd8 — 2024-12-17
FileHash-SHA1 9f7790524bd759373ab57ee2aafa6f5d8bcb918a — 2024-12-17
FileHash-SHA1 a20c5bf7a30f597524a74d78dfe7ef6f15edad52 — 2024-12-17
FileHash-SHA1 a80c7010fea9915a0a82108139aec3aa2363f0df — 2024-12-17
FileHash-SHA1 b2a14e77c96640914399e5f46e1dec279e7b940f — 2024-12-17
FileHash-SHA1 b3dfb40336c2f17ec74051844ffaf65ddb874cfc — 2024-12-17
FileHash-SHA1 b663c7381f53c2fa6d4619a5fe7d63d3fd7a3455 — 2024-12-17
FileHash-SHA1 bca97bf7e93309e49311701b22569395b2baecc7 — 2024-12-17
FileHash-SHA1 bed9efb245fac8cfff8333ae37ad78ccfb7e2198 — 2024-12-17
FileHash-SHA1 c64435ccd604e142c6498417d66b4950c7c6b670 — 2024-12-17
FileHash-SHA1 ca25fb923f8a8f0293e52893979b7e429e913d7b — 2024-12-17
FileHash-SHA1 cdbbb6617d8937d17a1a9ef12750bee1cddf4562 — 2024-12-17
FileHash-SHA1 cf4210f762798486cc9d4911d2d9f0f6b2bdf687 — 2024-12-17
FileHash-SHA1 dcb4d0a47ea40fe4420b14552082e03e0e5fda9d — 2024-12-17
FileHash-SHA1 eca6363825c079099f3729097c06808ac32d4547 — 2024-12-17
FileHash-SHA1 f04feb22efaa8f401470fa5808adab9b35e87c4c — 2024-12-17
FileHash-SHA1 f1df0c5a74c9885cb5934e3eee5e7d3cf4d291c0 — 2024-12-17
FileHash-SHA1 f43d4d46bae9ad963c2eb05ef43e90aa3a5d88e3 — 2024-12-17
FileHash-SHA1 fd601a54bc622c041df0242662964a7ed31c6b9c — 2024-12-17
FileHash-SHA1 ed5342d9788392c6e854aaefa655c4d3b4831b6b — 2024-12-17
References (1)
↗ https://www.welivesecurity.com/en/eset-research/unveiling-wolfsbane-gelsemiums-linux-counterpart-to-gelsevirine/