← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
AI/LLM-Generated Malware Used to Exploit React2Shell
WHITE CyberHunter_NL 2026-02-10 Modified: 2026-03-12
32
IOCs
MEDIUM VOLUME
snappybeevirtualprotectvirtualallocdllmainfollowdeed ratsalt typhoontrendmicronovembercobalt strikepythonmalwareloader
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (7 / 32 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 141b28863cf639c0a0dd563344101f24 — 2026-02-10
FileHash-MD5 319d905b83bf9856b84340493c828a0c — 2026-02-10
FileHash-MD5 43f3f328248da7bda95407968604ff0b MD5 of b2b617e62353a672626c13cc7ad81b27f23f91282aad7a3a0db471d84852a9ac 2026-02-10
FileHash-MD5 505b55c2b68e32acb5ad13588e1491a5 MD5 of 25b9fdef3061c7dfea744830774ca0e289dba7c14be85f0d4695d382763b409b 2026-02-10
FileHash-MD5 94b7392133935d2034b8169b9ce50764 — 2026-02-10
FileHash-MD5 b706f4806dc88611873cadeb3ad1ff97 MD5 of 1a38303fb392ccc5a88d236b4f97ed404a89c1617f34b96ed826e7bb7257e296 2026-02-10
FileHash-MD5 d3539d71a12fe640f3af8d6fb4c680fd — 2026-02-10
References (1)
↗ https://www.darktrace.com/blog/ai-llm-generated-malware-used-to-exploit-react2shell?utm_source=CSN