Pulse Detail — Threat Intelligence

PULSE NAME

Tracking & Detecting GhostSocks Malware

WHITE CyberHunter_NL 2026-03-31 Modified: 2026-03-31

IOCs

MEDIUM VOLUME

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

Indicators of Compromise (3 / 19 total)

All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 IPv4 URL domain hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
URL	http://86.54.24.29/Renewable.exe	—	2026-03-31
URL	https://bloo.io/research/malware/ghostsocks	—	2026-03-31
URL	https://synthient.com/blog/ghostsocks-from-initial-access-to-residential-proxy	—	2026-03-31

References (1)