← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
341 Malicious Clawed Skills Found by the Bot They Were Targeting
WHITE ClawHavoc Tr1sa111 2026-02-05 Modified: 2026-03-06
17
IOCs
MEDIUM VOLUME
typosquattingcrypto walletsamosmalicious skillsatomic stealer (amos)bot securitysupply chain attackclawhubopenclaw
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Atomic Stealer (AMOS)
Indicators of Compromise (17)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 0c76e33ddde228e9ce098edf3bf5f06a — 2026-02-05
FileHash-MD5 3a4450bacf20eea2dcc246da7bce9667 — 2026-02-05
FileHash-MD5 8611dfd731c27ac1592de60a31c66634 — 2026-02-05
FileHash-SHA1 4a99a95d23fd37082675d4804348e8ebdb01e384 — 2026-02-05
FileHash-SHA1 71f101a613cc57745d4a605d0ce6d3c1cd7a4229 — 2026-02-05
FileHash-SHA1 8a5a5ff3663c4a530cfe975e66a0257f308368c6 — 2026-02-05
FileHash-SHA256 0e52566ccff4830e30ef45d2ad804eefba4ffe42062919398bf1334aab74dd65 — 2026-02-05
FileHash-SHA256 17703b3d5e8e1fe69d6a6c78a240d8c84b32465fe62bed5610fb29335fe42283 — 2026-02-05
FileHash-SHA256 1e6d4b0538558429422b71d1f4d724c8ce31be92d299df33a8339e32316e2298 — 2026-02-05
URL http://91.92.242.30/6x8c0trkp4l9uugo — 2026-02-05
URL http://91.92.242.30/7buu24ly8m1tn8m4 — 2026-02-05
URL http://91.92.242.30/x5ki60w1ih838sp7 — 2026-02-05
URL http://glot.io/snippets/hfdxv8uyaf — 2026-02-05
URL https://clawdex.koi.security — 2026-02-05
URL https://install.app-distribution.net/setup/ — 2026-02-05
hostname clawdex.koi.security — 2026-02-05
hostname install.app-distribution.net — 2026-02-05
References (1)
↗ https://www.koi.ai/blog/clawhavoc-341-malicious-clawedbot-skills-found-by-the-bot-they-were-targeting