PULSE NAME
Oz Batch: 50 IOCs (avg BDE: 85)
WHITE pduggusa 2026-02-01 Modified: 2026-03-03
34
IOCs
MEDIUM VOLUME
**OTX Pulse Description:** This pulse identifies a collection of 50 indicators related to various remote access tools (RATs) and stealers, including "Unknown Stealer," "pupy," "Havoc," "DCRat," "NetSupportManager RAT," "IClickFix," and "Lumma Stealer." These IOCs are critical for the detection of potential threats leveraging these malicious frameworks, which may utilize techniques outlined in MITRE ATT&CK, such as T1071 (Application Layer Protocol) for command and control operations. The average BDE (Big Data Analytics Energy) Score for these indicators is 85, indicating a high risk level. Detection timestamp: [insert timestamp here].
Indicators of Compromise (34)
All domain hostname FileHash-SHA256 FileHash-MD5
TYPEINDICATORDESCRIPTIONCREATED
domain icloudmacs.com BDE: 85 2026-02-01
domain icloudmacsend.com BDE: 85 2026-02-01
domain imacdrivedock.com BDE: 85 2026-02-01
domain imacfilesafe.com BDE: 85 2026-02-01
domain imacfolder.com BDE: 85 2026-02-01
domain imacinstall.com BDE: 85 2026-02-01
domain transfernow.website BDE: 85 2026-02-01
hostname www.scholze.family BDE: 85 2026-02-01
FileHash-SHA256 54193af95cf82cdbcc2b331bfd7112915a54bfd872b4fce2e148777fff41a995 BDE: 85 2026-02-01
FileHash-MD5 9d18ee23e1c0f2575d1638502d753aec BDE: 85 2026-02-01
domain lucifer.now BDE: 85 2026-02-01
domain nightlomsknies.com BDE: 85 2026-02-01
domain notlimbobimboa.com BDE: 85 2026-02-01
domain notmauserfizko.com BDE: 85 2026-02-01
domain fnotusykakimao.com BDE: 85 2026-02-01
domain otpnemoyjfh.com BDE: 85 2026-02-01
domain pisikakimmmad.com BDE: 85 2026-02-01
domain makimakiokina.com BDE: 85 2026-02-01
domain atmospheredast.com BDE: 85 2026-02-01
domain newgenlosehops.com BDE: 85 2026-02-01
domain dlkgldkfngmlkdfnmg.com BDE: 85 2026-02-01
domain daoodasdldldl.com BDE: 85 2026-02-01
domain otoqsdfgvbvv.com BDE: 85 2026-02-01
domain pototooqalal.com BDE: 85 2026-02-01
domain doasootototota.com BDE: 85 2026-02-01
domain sfadjfjfsjjsdjfoofof.com BDE: 85 2026-02-01
domain mvjfkakfkfkaiai.com BDE: 85 2026-02-01
domain dkaksdaksortor.com BDE: 85 2026-02-01
domain dasktiitititit.com BDE: 85 2026-02-01
domain ksfldfklskdmbxcvb.com BDE: 85 2026-02-01
domain depthbx.cyou BDE: 85 2026-02-01
domain condelx.cyou BDE: 85 2026-02-01
domain botanyh.cyou BDE: 85 2026-02-01
domain backsan.cyou BDE: 85 2026-02-01