PULSE NAME
SideWinder targets the maritime and nuclear sectors with an updated toolset
WHITE CyberHunter_NL 2025-03-11 Modified: 2025-03-11
70
IOCs
HIGH VOLUME
Last year, we published an article about SideWinder, a highly prolific APT group whose primary targets have been military and government entities in Pakistan, Sri Lanka, China, and Nepal. In it, we described activities that had mostly happened in the first half of the year. We tried to draw attention to the group, which was aggressively extending its activities beyond their typical targets, infecting government entities, logistics companies and maritime infrastructures in South and Southeast Asia, the Middle East, and Africa. We also shared further information about SideWinder’s post-exploitation activities and described a new sophisticated implant designed specifically for espionage.
Indicators of Compromise (10 / 70 total)
All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 013ead0c89431a69bbe7e7b39a1095dc4faea456 SHA1 of f42ba43f7328cbc9ce85b2482809ff1c 2025-03-11
FileHash-SHA1 334f3313b03bbfeaae6fc7a0257d4fd8cb6dd751 SHA1 of a694ccdb82b061c26c35f612d68ed1c2 2025-03-11
FileHash-SHA1 5a12b7f4214ac1f79f2b613fb482e58701dfaaa6 SHA1 of e9726519487ba9e4e5589a8a5ec2f933 2025-03-11
FileHash-SHA1 639ccf8e2e0643b0d93db9ebf508ac0f1836cccd SHA1 of bd8043127abe3f5cfa61bd2174f54c60 2025-03-11
FileHash-SHA1 69069ac1c9bdc97ff1d060d4fc9f42b91c25669b SHA1 of 3d9961991e7ae6ad2bae09c475a1bce8 2025-03-11
FileHash-SHA1 71daaff7ba2b92e69a5e94c0efa2f5a097bcd65c SHA1 of 0216ffc6fb679bdf4ea6ee7051213c1e 2025-03-11
FileHash-SHA1 81d00923f2e9e0bae7c51ffbcb66409dd9a3da05 SHA1 of 433480f7d8642076a8b3793948da5efe 2025-03-11
FileHash-SHA1 84b4b2705018e38253796cd3f84ee68694d9b9c0 SHA1 of d36a67468d01c4cb789cd6794fb8bc70 2025-03-11
FileHash-SHA1 96cafccda39d2dd06e22b33ca37504405439c23d SHA1 of 313f9bbe6dac3edc09fe9ac081950673 2025-03-11
FileHash-SHA1 dbc5756895b6585527bd6ebc4411ea6a4a6e2886 SHA1 of 872c2ddf6467b1220ee83dca0e118214 2025-03-11