← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
CVE-2025-0411: Ukrainian Organizations Targeted in Zero-Day Campaign and Homoglyph Attacks
WHITE threatmanager 2025-02-19 Modified: 2025-03-21
64
IOCs
HIGH VOLUME
The Trend ZDI team offers an analysis on how CVE-2025-0411, a zero-day vulnerability in 7-Zip, was actively exploited to target Ukrainian organizations in a SmokeLoader campaign involving homoglyph attacks.
httpdomainsipv4trojanspy
MITRE ATT&CK & Malware Families
MALWARE FAMILIES
TrojanSpy
Indicators of Compromise (13 / 64 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 0359edc4d2038de4660e733f5a80de94 MD5 of 62eb856a5f646c2883a3982f15c3eb877641f9e69783383ce8a73c688eccd543 2025-02-19
FileHash-MD5 0851f82500aafa5e21153d8259ff9335 MD5 of 888f68917f9250a0936fd66ea46b6c510d0f6a0ca351ee62774dd14268fe5420 2025-02-19
FileHash-MD5 27535aabdb1db8ad9b995fe23f4de673 MD5 of 8ee225bdd38cf6fd014a16beb9e33a0650147a9b7ea2104afe2f47c01bd1db0b 2025-02-19
FileHash-MD5 28971ced9168cc58fe92749bdff49afe MD5 of fdfbdd42944c9e3b9697a8d8375e4e5cfd45c86941aa3f8f6dd0d08607b73144 2025-02-19
FileHash-MD5 4f6cb09e56494f178fd06ee05c3880ac MD5 of 5c7d582ba61ac95fb0d330ecc05feeb4853ac1de1f5a6fd12df6491dd0b7ea34 2025-02-19
FileHash-MD5 5a4a102594665c3ff927155a43d7520d MD5 of b3df042c5286fa91a4555e105038364bc66bfe7fdfe3769eb26b96e0ffe6096b 2025-02-19
FileHash-MD5 6476071b5a91ac078350768dc9b2e953 MD5 of a059d671d950abee93ef78a170d58a3839c2a465914ab3bd5411e39c89ae55a2 2025-02-19
FileHash-MD5 733f92d06a4154475ce4840a60ee5b38 MD5 of 84ab6c3e1f2dc98cf4d5b8b739237570416bb82e2edaf078e9868663553c5412 2025-02-19
FileHash-MD5 7564fc9db09034f49408c33fae34a335 MD5 of d6d722ae73ddff1ad7c468feca882b159a2a6e267df8b219482b514cdab74c21 2025-02-19
FileHash-MD5 a5c0541a087cdd75e0065eac3cd14a06 MD5 of 554d9ddd6fd1ccb15d7686c8badb8653323c71884c7f20efb19b56324ff34fc1 2025-02-19
FileHash-MD5 db0e698f068ffdba8c1c40a3818e86d5 MD5 of 915b73a57aaf759fbd5352d79656e1b697545e6c9d953ab05aacf61ed4f6e397 2025-02-19
FileHash-MD5 e75185a22cdf243af1a5f41fd53d9a0d MD5 of 54678013c8741db3340960e54ba93001c27619ead5cf5cc2eafd4c0fcf797ae6 2025-02-19
FileHash-MD5 f68acb34a6164d572fd9fae12223c66d MD5 of 2e33c2010f95cbda8bf0817f1b5c69b51c860c536064182b67261f695f54e1d5 2025-02-19
References (1)
↗ https://www.trendmicro.com/en_us/research/25/a/cve-2025-0411-ukrainian-organizations-targeted.html