← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages | Trend Micro (US)
WHITE Tr1sa111 2026-03-08 Modified: 2026-04-07
38
IOCs
MEDIUM VOLUME
malwareresearcharticlesnewsreportscyber threatscyber crimelearnboryptgrabtrend visionsha256githubtunnesshclienttrend microheaconloadvision onetrendai visionalliancestopfinddownloaddiscordvidarprotectsmallcarriersvoiceattackdemoshellaprilpythonpowershellnonametycoonkorean
Indicators of Compromise (38)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 37e63c37d951649c131922e48ab52055 MD5 of 2abe0ef88ba92db79d82cde4c0ed1f382bb347517a54ea82084c841d0f955518 2026-03-08
FileHash-MD5 5fa8c4b5feed7484e1bb56e51ab6b9c3 MD5 of 15de71073f44c657c23f5f97caa11f1b12e654d4d17684bfc628cc1e5b6bcdd5 2026-03-08
FileHash-MD5 8bb75fd48b895157f7844f061a908845 MD5 of 0434437a073a3f3a49e84d5ecb20c99dd551bacc32bf100fbb8cf67a50642181 2026-03-08
FileHash-MD5 b6d6e71bff9df5a99ba08258d2d53d31 MD5 of 576692df4bf1c7d8927d3a183f5219a81c3bff3dd22971691f8af6889f80c5a0 2026-03-08
FileHash-MD5 d8551563571e8f01c48a4c717810b7b9 MD5 of 1bd605ef84b6767df74bd6290f1468eed5a88264df23fcf70b6a75d5bdcf7d76 2026-03-08
FileHash-MD5 e573630aa0a908265adff951a534a12a MD5 of 4e90d386c1c7d3d1fd4176975795a2f432d95685690778e09313b4a1dbab9997 2026-03-08
FileHash-SHA1 05b683e36a7ed1ee766b135323d92eb6c8772a2d SHA1 of 2abe0ef88ba92db79d82cde4c0ed1f382bb347517a54ea82084c841d0f955518 2026-03-08
FileHash-SHA1 288de2395643496da7fded6f92343f734528149c SHA1 of 576692df4bf1c7d8927d3a183f5219a81c3bff3dd22971691f8af6889f80c5a0 2026-03-08
FileHash-SHA1 7017b69b09f3b51ea36ba121b83092bd345d9725 SHA1 of 15de71073f44c657c23f5f97caa11f1b12e654d4d17684bfc628cc1e5b6bcdd5 2026-03-08
FileHash-SHA1 84a1d0e1d7676bdb3f6e979c204493719a4c80cd SHA1 of 4e90d386c1c7d3d1fd4176975795a2f432d95685690778e09313b4a1dbab9997 2026-03-08
FileHash-SHA1 e1dd68ffc3a7be2c7f75a47d55d1e21e7fd7d4b7 SHA1 of 1bd605ef84b6767df74bd6290f1468eed5a88264df23fcf70b6a75d5bdcf7d76 2026-03-08
FileHash-SHA1 ea3e94304172189db52b03b3491a346708408033 SHA1 of 0434437a073a3f3a49e84d5ecb20c99dd551bacc32bf100fbb8cf67a50642181 2026-03-08
FileHash-SHA256 0434437a073a3f3a49e84d5ecb20c99dd551bacc32bf100fbb8cf67a50642181 — 2026-03-08
FileHash-SHA256 15de71073f44c657c23f5f97caa11f1b12e654d4d17684bfc628cc1e5b6bcdd5 — 2026-03-08
FileHash-SHA256 1bd605ef84b6767df74bd6290f1468eed5a88264df23fcf70b6a75d5bdcf7d76 — 2026-03-08
FileHash-SHA256 2050468744e44554fac17fb83f1515c95f2f2236716e2b5267a81c2b94205e6a — 2026-03-08
FileHash-SHA256 2abe0ef88ba92db79d82cde4c0ed1f382bb347517a54ea82084c841d0f955518 — 2026-03-08
FileHash-SHA256 4264a88035aa0b63e9aef96daa78a58114d60a344ea10168a8ef5ef36bf8edbd — 2026-03-08
FileHash-SHA256 433a13cc70396f80dc29d1150c050339d78964fdc91bcdc3f40c67a77add1476 — 2026-03-08
FileHash-SHA256 449f528f5ceae8c3f8336d0d8e3e3ec9031d1ad67c31ee7311b67e01d5fdf225 — 2026-03-08
FileHash-SHA256 4e90d386c1c7d3d1fd4176975795a2f432d95685690778e09313b4a1dbab9997 — 2026-03-08
FileHash-SHA256 576692df4bf1c7d8927d3a183f5219a81c3bff3dd22971691f8af6889f80c5a0 — 2026-03-08
FileHash-SHA256 7f2315b89fb9a47e1516def136844d617bfcdce19000a1b0436706692dbe166c — 2026-03-08
FileHash-SHA256 c40b9913e79c5dd09751b1afb03aaa98658bab61bacf27a299abd84fd44fe707 — 2026-03-08
FileHash-SHA256 d295720bc0c1111ce1c3d8b1bc1b36ba840f103b3ca7e95a5a8bf03e2cc44fe5 — 2026-03-08
FileHash-SHA256 ed1745cc49b929e499966d87e163219fe0f24069fe88dfacbd69c0ebab85a640 — 2026-03-08
FileHash-SHA256 fa767391b99865f8533efc1fe6dfa6175215718679fb00ca85fc13c3bd4ae4b7 — 2026-03-08
FileHash-SHA256 fe4e5fb28d2c2b3a640112b6b125ce8c4afa8be28342e3bfda097ad9dd2ef9ee — 2026-03-08
URL http://193.143.1.104 — 2026-03-08
URL http://45.93.20.195 5b13fb5957b84ef7bb9d0b6cd509c947ff6a37d67efdac2b896ddd3b908aad10 2026-03-08
URL http://45.93.20.61:5466/api/x32_chromium — 2026-03-08
URL https://best-tinted.com/github-download.html — 2026-03-08
URL https://botshield.vu/KKRkm9 — 2026-03-08
URL https://botshield.vu/kFcjld — 2026-03-08
URL https://kiamatka.com/kaiok.kakman — 2026-03-08
domain best-tinted.com — 2026-03-08
domain botshield.vu — 2026-03-08
domain kiamatka.com — 2026-03-08
References (1)
↗ https://www.trendmicro.com/en_us/research/26/c/boryptgrab-stealer-targets-users-via-deceptive-github-pages.html