Pulse Detail — Threat Intelligence

PULSE NAME

How a Tax Search Leads to Kernel-Mode AV/EDR Kill

WHITE Tr1sa111 2026-03-21 Modified: 2026-03-21

IOCs

MEDIUM VOLUME

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

MALWARE FAMILIES

HwAudKiller FatMalloc

Indicators of Compromise (7 / 25 total)

All FileHash-SHA256 FileHash-SHA1 FileHash-MD5 URL domain hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA256	8a4033425d36cd99fe23e6faef9764fbf555f362ebdb5b72379342fbbe4c5531	—	2026-03-21
FileHash-SHA256	033f42102362a8d8d4bdba870599eb5e0c893d8fd8dd4bc2a4b446cbbeb59b99	—	2026-03-21
FileHash-SHA256	0821661e715fe64bb39f4fece277737a48fd6839edd40ec8a4a39bf04cea8524	—	2026-03-21
FileHash-SHA256	28278b8c85c832417f9860fe8ea3ddbb9ff1d5860317db4813227a3a52b7c7cc	—	2026-03-21
FileHash-SHA256	2b409a265f571dccde6ef4860831c1b03d5418d1951f97925315dc5b0891da04	—	2026-03-21
FileHash-SHA256	5abe477517f51d81061d2e69a9adebdcda80d36667d0afabe103fda4802d33db	—	2026-03-21
FileHash-SHA256	7509365935fc1bfadba20656698d3a29051031635419043bc2bc45116106e026	—	2026-03-21

References (1)