← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
IOC - New FIN7-Linked Infrastructure, PowerNet Loader, and Fake Update Attacks
WHITE GrayAlpha celestre 2025-06-19 Modified: 2025-07-13
376
IOCs
HIGH VOLUME
fake updatespowernet7-zipinfrastructurefin7tag-124netsupport ratmaskbat
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
PowerNet NetSupport RAT MaskBat
Indicators of Compromise (33 / 376 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 05d400f4734d2d68af6bb916112f5a19 — 2025-06-19
FileHash-MD5 0671bd79586ae06680cfee11753f509e — 2025-06-19
FileHash-MD5 068d55958d46c01408ca354967b482b7 — 2025-06-19
FileHash-MD5 06a6bc8bc98213d770acffb7b28b6abb — 2025-06-19
FileHash-MD5 09576ba9ff1933617add7f14e944387b — 2025-06-19
FileHash-MD5 0c91401af0f77c91d7d2c2d858043cc2 — 2025-06-19
FileHash-MD5 0cb3f8d4df1f2139e45b3a276fa48f25 — 2025-06-19
FileHash-MD5 0ec6ce8d2213cc9a7b570fc22e5fce1a — 2025-06-19
FileHash-MD5 14048ed02214ef052169460340e9a420 — 2025-06-19
FileHash-MD5 14c2ce8f3c5856c8415368930bb8c1df — 2025-06-19
FileHash-MD5 2d39a5f8bece043c706a3ff6c1c59e9a — 2025-06-19
FileHash-MD5 318bf7ea84487c8a63a3996e24494455 — 2025-06-19
FileHash-MD5 3a0ef7cf40cc50d47cb956fce8baa456 — 2025-06-19
FileHash-MD5 3e390f3b3ca7d3716775f832c93fb1b1 — 2025-06-19
FileHash-MD5 42cb39b338f2b1bc94f5ae483b048e30 — 2025-06-19
FileHash-MD5 5085779e68656455315ca6a46157ab88 — 2025-06-19
FileHash-MD5 51feca3c49e7b0323133e85716a28a3a — 2025-06-19
FileHash-MD5 5fcd76bddd9b41bf5c63ec660d82f977 — 2025-06-19
FileHash-MD5 610e029cb014dcec9c079ca11020c333 — 2025-06-19
FileHash-MD5 663492a2fb33c3c4a5813b880d48f7be — 2025-06-19
FileHash-MD5 6eaa4c8938016293d2153ccd78b473fc — 2025-06-19
FileHash-MD5 72b343b03e9197f425e6a918a2c20a47 — 2025-06-19
FileHash-MD5 797992ab276d218d7feb2e6e8b2fd678 — 2025-06-19
FileHash-MD5 798aed4d37293ea34448cf0496cfeefa — 2025-06-19
FileHash-MD5 99b82bdc2f4559929a3a884aebacd11c — 2025-06-19
FileHash-MD5 a5685feb1b6c54ba5149ed2f7000f491 — 2025-06-19
FileHash-MD5 b0fd9705e8f83129f97f9111b03642fe — 2025-06-19
FileHash-MD5 b57d2544cb7736d533af1aa07040156b — 2025-06-19
FileHash-MD5 cdb98412665135775e908564c87d5144 — 2025-06-19
FileHash-MD5 d4fe37649a9778e80ae9a5a8633d2af4 — 2025-06-19
FileHash-MD5 ef9de8cc533ce1848588679e61e70b15 — 2025-06-19
FileHash-MD5 f899781c5239e59fd7d11c9211c08d28 — 2025-06-19
FileHash-MD5 ff25441b7631d64afefdb818cfcceec7 — 2025-06-19
References (2)
↗ https://www.recordedfuture.com/research/grayalpha-uses-diverse-infection-vectors-deploy-powernet-loader-netsupport-rat ↗ https://cms.recordedfuture.com/uploads/format_webp/recordedfuture_insikt_cover_gray_alpha_1600x600_e9dc818048.jpg