← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
The long road to your crypto: ClipBanker and its marathon infection chain
Proxifiers are speciaized software designed to tunnel traffic for programs that do not natively support proxy servers. They are a go-to for making sure these apps are functional within secured development environments. By coincidence, Proxifier is also a name for a proprietary proxifier developed by VentoByte, which is distributed under a paid license. If you search for Proxifier (or a proxifier), one of the top results in popular search engines is a link to a GitHub repository. That’s exactly where the source of the primary infection lives.
MITRE ATT&CK & Malware Families
MALWARE FAMILIES
ClipBanker
Indicators of Compromise (12)
| TYPE | INDICATOR | DESCRIPTION | CREATED | |
|---|---|---|---|---|
| FileHash-MD5 | 107484d66423cb601f418344cd648f12 | — | 2026-04-09 | |
| FileHash-MD5 | 34a0f70ab100c47caaba7a5c85448e3d | — | 2026-04-09 | |
| FileHash-MD5 | 7528bf597fd7764fcb7ec06512e073e0 | — | 2026-04-09 | |
| FileHash-MD5 | 8354223cd6198b05904337b5dff7772b | — | 2026-04-09 | |
| FileHash-SHA1 | 15efe7c0a510950c753a9ec1a388d699b341a2c4 | — | 2026-04-09 | |
| FileHash-SHA1 | d85cef60cdb9e8d0f3cb3546de6ab657f9498ac7 | — | 2026-04-09 | |
| FileHash-SHA256 | fdae784b02b22916bf4bac1344b3e8e13f98996e3cd85f2daf171084983247e1 | — | 2026-04-09 | |
| domain | chiaselinks.com | — | 2026-04-09 | |
| domain | rlim.com | — | 2026-04-09 | |
| hostname | git.parat.swiss | — | 2026-04-09 | |
| hostname | paste.kealper.com | — | 2026-04-09 | |
| hostname | pinhole.rootcode.ru | — | 2026-04-09 |