← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
AI/LLM-Generated Malware Used to Exploit React2Shell
WHITE CyberHunter_NL 2026-02-10 Modified: 2026-03-12
32
IOCs
MEDIUM VOLUME
snappybeevirtualprotectvirtualallocdllmainfollowdeed ratsalt typhoontrendmicronovembercobalt strikepythonmalwareloader
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (6 / 32 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 07ddc6bb5edac4e9fe5be96e7ab60eda0f9376c3 — 2026-02-10
FileHash-SHA1 153219368080efd938df03ebd119cf1dedf341f9 SHA1 of 319d905b83bf9856b84340493c828a0c 2026-02-10
FileHash-SHA1 5e6f0888e6e4ec4145c29a31c46c9c1a33c8a4cf SHA1 of d3539d71a12fe640f3af8d6fb4c680fd 2026-02-10
FileHash-SHA1 7d9ea7c8934d293429103fd0f8f58b370bd1249b SHA1 of b2b617e62353a672626c13cc7ad81b27f23f91282aad7a3a0db471d84852a9ac 2026-02-10
FileHash-SHA1 9218e2c37c339527736cdc9d9aad88de728931a3 SHA1 of 25b9fdef3061c7dfea744830774ca0e289dba7c14be85f0d4695d382763b409b 2026-02-10
FileHash-SHA1 dfe752f103e8e0cdb6ee419a5e753a451488420c SHA1 of 1a38303fb392ccc5a88d236b4f97ed404a89c1617f34b96ed826e7bb7257e296 2026-02-10
References (1)
↗ https://www.darktrace.com/blog/ai-llm-generated-malware-used-to-exploit-react2shell?utm_source=CSN