← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Investigation on the EmEditor Supply Chain Cyberattack
WHITE Tr1sa111 2026-02-10 Modified: 2026-03-11
13
IOCs
MEDIUM VOLUME
powershellsupply chain attackemeditorcommand and controldomain masqueradingwatering hole
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (13)
All FileHash-MD5 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 b97d5024adab17ceffe134f9ea877bf5 — 2026-02-10
FileHash-MD5 d3c0ea5bc904ae05c509b3b6de72e1c8 — 2026-02-10
FileHash-SHA256 ceb31976b8040cad5d5db3856466d198d3c0ea5bc904ae05c509b3b6de72e1c8 — 2026-02-10
domain cachingdrive.com — 2026-02-10
domain emeditorde.com — 2026-02-10
domain emeditorgb.com — 2026-02-10
domain emeditorjapan.com — 2026-02-10
domain emeditorjp.com — 2026-02-10
domain emeditorltd.com — 2026-02-10
domain emedjp.com — 2026-02-10
domain emedorg.com — 2026-02-10
domain keyactivate.cc — 2026-02-10
domain nc7d8p7u8j3n4hgm.com — 2026-02-10
References (1)
↗ https://www.stormshield.com/news/investigation-on-the-emeditor-supply-chain-attack