← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Call It What You Want: Threat Actor Delivers Highly Targeted Multistage Polyglot Malware | Proofpoint US
WHITE Tr1sa111 2025-03-05 Modified: 2025-04-04
15
IOCs
MEDIUM VOLUME
proofpointunkcraftycamelsosanourl filesosano backdooret malwareunited arabzip archivegolangzip filepythonrats
Indicators of Compromise (4 / 15 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 304a9849894df9e6b3d381f2d24bcf2ef5b497fb SHA1 of 336d9501129129b917b23c60b01b56608a444b0fbe1f2fdea5d5beb4070f1f14 2025-03-05
FileHash-SHA1 cf136da651dfb9104dcba68460ff57288b8c2ff9 SHA1 of e692ff3b23bec757f967e3a612f8d26e45a87509a74f55de90833a0d04226626 2025-03-05
FileHash-SHA1 f336903e65598cdc4908ee4ac0ff106c8c7fb027 SHA1 of 394d76104dc34c9b453b5adaf06c58de8f648343659c0e0512dd6e88def04de3 2025-03-05
FileHash-SHA1 f5e1b8a9a9ebce41fe734b82a312046b3d7d44a4 SHA1 of 0c2ba2d13d1c0f3995fc5f6c59962cee2eb41eb7bdbba4f6b45cba315fd56327 2025-03-05
References (1)
↗ https://www.proofpoint.com/us/blog/threat-insight/call-it-what-you-want-threat-actor-delivers-highly-targeted-multistage-polyglot