← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
IOC -A fake FileZilla site hosts a malicious download
WHITE celestre 2026-03-04 Modified: 2026-04-02
8
IOCs
LOW VOLUME
filezillawindowsftp clientdllsprocess monitorname notfoundnotepad updatefilezilla sitedll searchstefancompromiseiocsfilesha256domainsnetworkc2 server
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (2 / 8 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 665cca285680df321b63ad5106b167db9169afe30c17d349d80682837edcc755 — 2026-03-04
FileHash-SHA256 e4c6f8ee8c946c6bd7873274e6ed9e41dec97e05890fa99c73f4309b60fd3da4 — 2026-03-04
References (1)
↗ https://www.malwarebytes.com/blog/threat-intel/2026/03/a-fake-filezilla-site-hosts-a-malicious-download