← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
NetSupport RAT Clickfix Distribution
WHITE Tr1sa111 2025-02-12 Modified: 2025-03-14
37
IOCs
MEDIUM VOLUME
netsupport ratclickfixaccess trojansourcejanuarythreat responseunitpowershellnetworkcompromisefebruaryrefervirustotal
Indicators of Compromise (37)
All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
CVE CVE-2019-18935 — 2025-02-12
FileHash-MD5 ee75b57b9300aab96530503bfae8a2f2 MD5 of 06a0a243811e9c4738a9d413597659ca8d07b00f640b74adc9cb351c179b3268 2025-02-12
FileHash-SHA1 98dd757e1c1fa8b5605bda892aa0b82ebefa1f07 SHA1 of 06a0a243811e9c4738a9d413597659ca8d07b00f640b74adc9cb351c179b3268 2025-02-12
FileHash-SHA256 06a0a243811e9c4738a9d413597659ca8d07b00f640b74adc9cb351c179b3268 — 2025-02-12
FileHash-SHA256 0f055a3785c52067e413d057880cb4ef038bf209121fc6c44600c9b0fe7fdf54 — 2025-02-12
FileHash-SHA256 16a178b33877f9c3219bbe1685bfb879b7c8ab8965dbc734fd49ecb02e8c9d01 — 2025-02-12
URL http://92.255.85.135/fakeurl.htm — 2025-02-12
URL http://eiesoft.com/Ray-verify.html — 2025-02-12
URL http://eveverify.com/captcha.html — 2025-02-12
URL http://fbinter.com/a/1.png — 2025-02-12
URL http://fbinter.com/a/10.png — 2025-02-12
URL http://fbinter.com/a/11.png — 2025-02-12
URL http://fbinter.com/a/12.png — 2025-02-12
URL http://fbinter.com/a/2.png — 2025-02-12
URL http://fbinter.com/a/3.png — 2025-02-12
URL http://fbinter.com/a/4.png — 2025-02-12
URL http://fbinter.com/a/5.png — 2025-02-12
URL http://fbinter.com/a/6.png — 2025-02-12
URL http://fbinter.com/a/7.png — 2025-02-12
URL http://fbinter.com/a/8.png — 2025-02-12
URL http://fbinter.com/a/9.png — 2025-02-12
URL http://fbinter.com/a/b.png — 2025-02-12
URL http://findkik.com/Ray-verify.html — 2025-02-12
URL http://hardcorelegends.com/a/b.png — 2025-02-12
URL http://incomputersolutions.com/o/o.png — 2025-02-12
URL http://lynxcm.com/Ray-verify.html — 2025-02-12
URL http://mellittler.com/a/b.png — 2025-02-12
URL http://sapeconomico.com/captcha.html — 2025-02-12
domain eiesoft.com — 2025-02-12
domain eveverify.com — 2025-02-12
domain fbinter.com — 2025-02-12
domain findkik.com — 2025-02-12
domain hardcorelegends.com — 2025-02-12
domain incomputersolutions.com — 2025-02-12
domain lynxcm.com — 2025-02-12
domain mellittler.com — 2025-02-12
domain sapeconomico.com — 2025-02-12
References (1)
↗ https://www.esentire.com/security-advisories/netsupport-rat-clickfix-distribution