Pulse Detail — Threat Intelligence

PULSE NAME

IOC - HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns

WHITE HoneyMyte celestre 2026-01-28 Modified: 2026-02-26

IOCs

MEDIUM VOLUME

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

MALWARE FAMILIES

CoolClient ToneShell PlugX - S0013 Thoper TVT DestroyRAT Sogu Kaba Korplug LuminousMoth QReverse

Indicators of Compromise (19)

All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-MD5	1a5a9c013ce1b65abc75d809a25d36a7	—	2026-01-28
FileHash-MD5	1a61564841bbbb8e7774cbbeb3c68d5d	—	2026-01-28
FileHash-MD5	1bc5329969e6bf8ef2e9e49aab003f0b	—	2026-01-28
FileHash-MD5	6b7300a8b3f4aac40eeecfd7bc47ee7c	—	2026-01-28
FileHash-MD5	7aa53ba3e3f8b0453ffcfba06347ab34	—	2026-01-28
FileHash-MD5	838b591722512368f81298c313e37412	—	2026-01-28
FileHash-MD5	a1cd59f769e9e5f6a040429847ca6eae	—	2026-01-28
FileHash-MD5	a4d7147f0b1ca737bfc133349841aaba	—	2026-01-28
FileHash-MD5	aeb25c9a286ee4c25ca55b72a42efa2c	—	2026-01-28
FileHash-MD5	c19bd9e6f649df1df385deef94e0e8c4	—	2026-01-28
FileHash-MD5	da6f89f15094fd3f74ba186954be6b05	—	2026-01-28
FileHash-MD5	e1b7ef0f3ac0a0a64f86e220f362b149	—	2026-01-28
FileHash-MD5	f518d8e5fe70d9090f6280c68a95998f	—	2026-01-28
FileHash-SHA1	78cee623d06696ee31b25aa4e1b07c5724b1f7b7	—	2026-01-28
FileHash-SHA256	941993f885957176d75f24ef3f8935ecb589bb9b445bb0d71fb18b65e61b6ee4	—	2026-01-28
URL	http://45.144.165.65/BUIEFuiHFUEIuioKLWENFUoi878UIESf/MUEWGHui897hjkhsjdkHfjegfdh/67jksaebyut8seuhfjgfdgdfhet4SEDGF/Tools/getlogindataedge.exe	—	2026-01-28
domain	popnike-share.com	—	2026-01-28
hostname	account.hamsterxnxx.com	—	2026-01-28
hostname	japan.lenovoappstore.com	—	2026-01-28

References (1)