← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Technical Analysis of Phishing Campaigns Targeting the Defense Industry Delivering Snake Keylogger
WHITE CyberHunter_NL 2025-07-21 Modified: 2025-07-21
13
IOCs
MEDIUM VOLUME
samplesmtpsnake keyloggerpowershellturkeychironoutlooktusaindustriesteklif isteiteameasyantibotsandboxtelegramdiscord
Indicators of Compromise (13)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain email hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 62148599ed6d8c875296c07631ffef53 MD5 of 0cb819d32cb3a2f218c5a17c02bb8c06935e926ebacf1e40a746b01e960c68e4 2025-07-21
FileHash-SHA1 5114bb17bb8e917527fd1a232e8f646b6f95e3c2 SHA1 of 0cb819d32cb3a2f218c5a17c02bb8c06935e926ebacf1e40a746b01e960c68e4 2025-07-21
FileHash-SHA256 0cb819d32cb3a2f218c5a17c02bb8c06935e926ebacf1e40a746b01e960c68e4 — 2025-07-21
FileHash-SHA256 11f577cc6b6af304332d47fba2122ffb193e81378662ea7093ebe971107d89d6 — 2025-07-21
FileHash-SHA256 2859b8700fc6111c40b806d114c43e2e3b4faa536eeab57d604818562905b911 — 2025-07-21
FileHash-SHA256 3c9cddf85962249a967b3827e3edb4acb710dc0e3088c619342e2ce6df35bfbc — 2025-07-21
FileHash-SHA256 82fa8156e9d4fb47cd20908818b9172f86ed13eb683041658f242c58ce0a9cff — 2025-07-21
URL http://4.0.0.0 — 2025-07-21
URL https://app.threat.zone/submission/64115637-e2c8-48c9-8d75-f1de2cf7c9f9 — 2025-07-21
domain dotnet.is — 2025-07-21
email royal@htcp.homes — 2025-07-21
email royals@htcp.homes — 2025-07-21
hostname mail.htcp.homes — 2025-07-21
References (1)
↗ https://www.malwation.com/blog/technical-analysis-of-phishing-campaigns-targeting-the-defense-industry-delivering-snake-keylogger