← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
BlueDelta’s Persistent Campaign Against UKR.NET
WHITE BlueDelta Tr1sa111 2025-12-18 Modified: 2026-01-16
59
IOCs
HIGH VOLUME
phishingukrainian targetsngrokproxy tunnelingpdf luresgrurussian threat actorwebmail compromiseukr.netcredential harvesting
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (9 / 59 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 3d434157d91afd59e26db91483e7a56d — 2025-12-18
FileHash-MD5 5ae39a1b39d45d08f947bdf0ee0452ae — 2025-12-18
FileHash-MD5 68053622c5cb645676c534fea7c4642a — 2025-12-18
FileHash-MD5 8b654832fbcf233f33e3cddef20a473a — 2025-12-18
FileHash-MD5 47e811dbe2ed0ea8d506af94c1bb7d4c — 2025-12-18
FileHash-MD5 6c7aa72bd5f1d30203b80596f926b2b7 — 2025-12-18
FileHash-MD5 73ce1aae8a9ba738b91040232524f51a — 2025-12-18
FileHash-MD5 92ace7e653e9c32d2af9700592cc96ea — 2025-12-18
FileHash-MD5 d7763713839aaf61dd299a55da3aad76 — 2025-12-18
References (1)
↗ https://www.recordedfuture.com/research/bluedeltas-persistent-campaign-against-ukrnet