PULSE NAME
CAPE Sandbox
WHITE msudosos 2026-03-30 Modified: 2026-04-29
150
IOCs
HIGH VOLUME
0a32d6abea15f3bfe2a74763ba6c4ef5 SHA1 d0a0ba4207f5432aad98b4a95b026000ed2cbd7c SHA256 ecbeaa13921dbad8028d29534c3878503f45a82a09cf27857fa4335bd1c9286d [VT] [MWDB] [Bazaar] SHA3-384 ef79fc72829f68826daed047da58341c5881407899b12a270156ddec9a5f6f9adf1837c00caac0f3361fb06efcf6540f CRC32 28718AD3 TLSH T14DA52212B6851CF9EC1791BDC3515A55EAB378820B31EEEF039481362F236E27E39B15 Ssdeep 49152:CXpR7NUIWY4kBvOlmNaxoVAiWAYt7zCEzlAt2auIZuJ5bg/:SVh4kwM6oVABVh3Iq8 Yara vmdetect - Possibly employs anti-virtualization techniques - Author: nex
Indicators of Compromise (38 / 150 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL http://app-metrics-cdn.com/api/listener/heartbeat 2026-03-30
URL http://app-metrics-cdn.com/api/upload 2026-03-30
URL http://app-metrics-cdn.com/api/upload-complete 2026-03-30
URL http://app-metrics-cdn.com/api/upload-json 0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5 2026-03-30
URL http://131.107.255.255 2026-03-30
URL http://disallowedcertstl.cab?4fb7a7102ad98859 2026-03-30
URL http://disallowedcertstl.cab?c4e968a9e1b90865 2026-03-30
URL http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?4fb7a7102ad98859 2026-03-30
URL http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c4e968a9e1b90865 2026-03-30
URL http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/pinrulesstl.cab?ddd949e0023c430e 2026-03-30
URL http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAsMayxGaRewR3PGR9SvwMg%3D 2026-03-30
URL http://oneocsp.microsoft.com/ocsp/MFQwUjBQME4wTDAJBgUrDgMCGgUABBR0TBEVYklX7A9yLoLD9hqmCWDxFgQU3pGGSLehMVkx8UtfB6nciHnaqHYCEzMAAAAPMyBlN%2B5Crk8AAAAAAA8%3D 2026-03-30
URL http://pinrulesstl.cab?ddd949e0023c430e 2026-03-30
URL http://www.learn.microsoft.com/en-us/search/?terms=LCMapStringW.com 2026-03-30
URL http://www.learn.microsoft.com/en-us/search/?terms=LCMapStringW.com 2026-03-30
URL https://github.com/MicrosoftDocs/DocsRoot/blob/8c7da50ad95ba815e3b51360c07f279037e73a7b/DocsCoreContent/Search/index.md 2026-03-30
URL https://github.com/MicrosoftDocs/DocsRoot/blob/live/DocsCoreContent/Search/index.md 2026-03-30
URL https://learn.microsoft.com/en-us/media/open-graph-image.png 2026-03-30
URL https://learn.microsoft.com/en-us/search/ 2026-03-30
URL https://learn.microsoft.com/en-us/search/?accept=text/markdown 2026-03-30
URL https://github.com/MicrosoftDocs/DocsRoot/blob/8c7da50ad95ba815e3b51360c07f279037e73a7b/DocsCoreContent/Search/index.md 2026-03-30
URL https://github.com/MicrosoftDocs/DocsRoot/blob/live/DocsCoreContent/Search/index.md 2026-03-30
URL https://learn.microsoft.com/en-us/media/open-graph-image.png 2026-03-30
URL https://learn.microsoft.com/en-us/search/ 2026-03-30
URL https://learn.microsoft.com/en-us/search/?accept=text/markdown 2026-03-30
URL https://github.com/MicrosoftDocs/DocsRoot/blob/8c7da50ad95ba815e3b51360c07f279037e73a7b/DocsCoreContent/Search/index.md 2026-03-30
URL https://github.com/MicrosoftDocs/DocsRoot/blob/live/DocsCoreContent/Search/index.md 2026-03-30
URL https://learn.microsoft.com/en-us/media/open-graph-image.png 2026-03-30
URL https://learn.microsoft.com/en-us/search/ 2026-03-30
URL https://learn.microsoft.com/en-us/search/?accept=text/markdown 2026-03-30
URL https://api.github.com/_private/browser/errors 2026-03-30
URL https://api.github.com/_private/browser/stats 2026-03-30
URL https://collector.github.com/github/collect 2026-03-30
URL https://github.com 2026-03-30
URL https://github.com/MicrosoftDocs/DocsRoot/blob/8c7da50ad95ba815e3b51360c07f279037e73a7b/DocsCoreContent/Search/index.md 2026-03-30
URL https://github.githubassets.com/assets/github-logo-55c5b9a1fe52.png 2026-03-30
URL https://github.githubassets.com/assets/github-mark-57519b92ca4e.png 2026-03-30
URL https://github.githubassets.com/assets/github-octocat-13c86b8b336d.png 2026-03-30