Pulse Detail — Threat Intelligence

PULSE NAME

PumaBot: Novel Botnet Targeting IoT Surveillance Devices

WHITE CyberHunter_NL 2025-06-04 Modified: 2025-06-04

IOCs

MEDIUM VOLUME

Darktrace has been named the world's leading provider of advanced network detection and response (SOC) for the next five years, with a global presence of more than 1.5 million customers.

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1003 T1082 T1033 T1059 T1102 T1105 T1014 T1036 T1071 T1543 T1110

MALWARE FAMILIES

Linux JSON Ddaemon

Indicators of Compromise (7 / 50 total)

All URL hostname FileHash-MD5 FileHash-SHA1 FileHash-SHA256 YARA domain email

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA256	0957884a5864deb4389da3b68d3d2a139b565241da3bb7b9c4a51c9f83b0f838	SHA256 of 1bd6bcd480463b6137179bc703f49545	2025-06-04
FileHash-SHA256	426276a76f20b823e896e3c08f1c42f3d15a91a55c3613c7b3bdfbef0bbed9a9	SHA256 of 0e455e06315b9184d2e64dd220491f7e	2025-06-04
FileHash-SHA256	6838d819b5588cd4b0a52c21d02cbf305005fc31bc0e6709d24223a0f6dfb249	SHA256 of be83729e943d8d0a35665f55358bdf88	2025-06-04
FileHash-SHA256	7c59d3e325ad6c6d85e3b4c457c8f816eb437e5e98a63584f5eb7a39e33a5f40	SHA256 of cb4011921894195bcffcdf4edce97135	2025-06-04
FileHash-SHA256	a5125945d7489d61155723259990c168db01dfedcd76a2e1ba08caa3c4532ca3	SHA256 of cab6f908f4dedcdaedcdd07fdc0a8e38	2025-06-04
FileHash-SHA256	ab50b0b9d5c9739383ce6178b258af10b116299ecb3319bbfb94f27d6f7b1b01	SHA256 of a9412371dc9247aa50ab3a9425b3e8ba	2025-06-04
FileHash-SHA256	f8c75077c3e3c97314c729a7a5fe97b1d2868a94632a351ba3985f0cf66c09d7	SHA256 of 48ee40c40fa320d5d5f8fc0359aa96f3	2025-06-04

References (1)

↗ https://www.darktrace.com/blog/pumabot-novel-botnet-targeting-iot-surveillance-devices