← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities
WHITE Pawn Storm Tr1sa111 2026-03-30 Modified: 2026-03-30
175
IOCs
HIGH VOLUME
prismexprismexstagernatonotdoorcve-2026-21509apt28critical infrastructureminidoorprismexloadercve-2026-21513ukrainesupply chainprismexdropsteganography
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
PRISMEX PrismexDrop PrismexLoader PrismexStager MiniDoor NotDoor
Indicators of Compromise (30 / 175 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname IPv4 email
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 5bd25498c247083954eb47acbd199ee7 — 2026-03-30
FileHash-MD5 154ff6774294e0e6a46581c8452a77de — 2026-03-30
FileHash-MD5 15e9255a3e3401e5f6578d2ac45b7850 — 2026-03-30
FileHash-MD5 2f7b4dca1c79e525aef8da537294a6c4 — 2026-03-30
FileHash-MD5 4423b8f3456e54eb48dfbde0b4c7984b — 2026-03-30
FileHash-MD5 4727582023cd8071a6f388ea3ba2feaa — 2026-03-30
FileHash-MD5 58f517bdc9ba8de1b69829b0dcf86113 — 2026-03-30
FileHash-MD5 630550e7ae6636c5f1dab5241597c91d — 2026-03-30
FileHash-MD5 6408276cdfd12a1d5d3ed7256bfba639 — 2026-03-30
FileHash-MD5 6f528ad405bffa4a8c2f61b1fa2172fd — 2026-03-30
FileHash-MD5 744bbe8d7c3d0421fa0deb582481f5ba — 2026-03-30
FileHash-MD5 7c396677848776f9824ebe408bbba943 — 2026-03-30
FileHash-MD5 81159738f7ffb50d5bc3c75e5e0ac546 — 2026-03-30
FileHash-MD5 828ff72e8d3dffcc232e6ae2ff100f45 — 2026-03-30
FileHash-MD5 859c4b85ed85e6cc4eadb1a037a61e16 — 2026-03-30
FileHash-MD5 8b8903b0e7b7a1a7f501277624bc7e6b — 2026-03-30
FileHash-MD5 95e59536455a089ced64f5af2539a449 — 2026-03-30
FileHash-MD5 9d1ad28ba8644e9a8b7e133960cdb512 — 2026-03-30
FileHash-MD5 9fc1df92fd199688b1726933f9e349db — 2026-03-30
FileHash-MD5 a7d1d249c43c2198a7c8d66db45c66bb — 2026-03-30
FileHash-MD5 b120e5a38c593246388688b26b9284b4 — 2026-03-30
FileHash-MD5 b6a86f44d0a3fa5a5ac979d691189f2d — 2026-03-30
FileHash-MD5 d47261e52335b516a777da368208ee91 — 2026-03-30
FileHash-MD5 d58e538b6f762f9c5cf220966e5cdc18 — 2026-03-30
FileHash-MD5 da3ed6eb6cf4255efccf4596bb932a45 — 2026-03-30
FileHash-MD5 e4122e880c1d946f41d36e74056871c2 — 2026-03-30
FileHash-MD5 e4a5c4b205e1b80dc20d9a2fb4126d06 — 2026-03-30
FileHash-MD5 ea6615942f2c23dba7810a6f7d69e2da — 2026-03-30
FileHash-MD5 ee0b44346db028a621d1dec99f429823 — 2026-03-30
FileHash-MD5 f8d9b7c864fb7558e8bad4cfb5c8e6ff — 2026-03-30
References (2)
↗ https://www.trendmicro.com/en_us/research/26/c/pawn-storm-targets-govt-infra.html ↗ https://documents.trendmicro.com/assets/txt/Pawn%20Storm%20Deploys%20PRISMA%20IOCs-xQ48S7H.txt