← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Iranian APT Seedworm Targets Global Organizations via Microsoft Teams
WHITE MuddyWater Tr1sa111 2026-04-21 Modified: 2026-04-21
77
IOCs
HIGH VOLUME
muddywater infrastructurein-memory executionseedwormmicrosoft teamsdindoorsocial engineeringdindoor backdooriran aptdeno runtimedinodance
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Dindoor DINODANCE
Indicators of Compromise (77)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 2115e69f71d9f51a6c6c2effdaee2df2 — 2026-04-21
FileHash-MD5 29953b2e46aeaf0157d487c13c4a0643 — 2026-04-21
FileHash-MD5 3962bfa78c7acd8d85b3700e99ae8d24 — 2026-04-21
FileHash-MD5 41c19fc6c8a8687988f28fc487048bf3 — 2026-04-21
FileHash-MD5 439c0a0a46627bd166e08436f383ad56 — 2026-04-21
FileHash-MD5 4860758863fd040a8c809ce53cb7fb37 — 2026-04-21
FileHash-MD5 56a4b425aba37ef886bdfbd8343a1bd5 — 2026-04-21
FileHash-MD5 591aae15106147bdb5bc7b26049b943f — 2026-04-21
FileHash-MD5 5c057af2f358fc10107d5ccdb39938ad — 2026-04-21
FileHash-MD5 64e4b0ffd8bed9307eb50b541b1d8fdb — 2026-04-21
FileHash-MD5 6d1d4e938ed1e46210375308ef3bcb08 — 2026-04-21
FileHash-MD5 7236f1a51da141e422d553e36ef6c9d0 — 2026-04-21
FileHash-MD5 76c59282e44a461105dc5739a6ba7c33 — 2026-04-21
FileHash-MD5 7a4119e116ecdefe0a1017110e250e61 — 2026-04-21
FileHash-MD5 7f3c8a7fe78d3d05b6022df3ea0c15fb — 2026-04-21
FileHash-MD5 838c8fd4ae7e3c4972adc8800db44929 — 2026-04-21
FileHash-MD5 8d8aa0be8f82d22deab96f96d9af34b8 — 2026-04-21
FileHash-MD5 c0a52cd5dd35bf9d5d08c7eb12cfa422 — 2026-04-21
FileHash-MD5 c23fc7b74370d590223d962727e67907 — 2026-04-21
FileHash-MD5 ca37e31d651bbd5bbddef3ea716b8b4f — 2026-04-21
FileHash-MD5 e2bcc41ddea5cf9d759380701d14f258 — 2026-04-21
FileHash-MD5 e6fafcb72f2f315692218182ba84e0ef — 2026-04-21
FileHash-MD5 f8560b9a893eeb2130fc7159e9c1b851 — 2026-04-21
FileHash-SHA1 0ba2306ec15f7124fafc7615e81f34c7986ba9a5 — 2026-04-21
FileHash-SHA1 2b781b3a352db44db67ad56e8477e6a1016b2597 — 2026-04-21
FileHash-SHA1 2e1cc87d974aa7f07a8911c631a191dc00535b36 — 2026-04-21
FileHash-SHA1 3ab3fee4daac90bb7bee470b5b2de8ee0d6bec8b — 2026-04-21
FileHash-SHA1 3de597e3237d5c7e7cc66ecb58b9ea2af149afa1 — 2026-04-21
FileHash-SHA1 3f441a009a907af55bd6d52b0f0f06b601c961dd — 2026-04-21
FileHash-SHA1 42111d2ebcd42fa1fa7069560401db736c483776 — 2026-04-21
FileHash-SHA1 429efcf0370b53cc3c455b634dc066b1d08b568d — 2026-04-21
FileHash-SHA1 4a54b7237dc9fdd745d0d19083a1ce4857c91de4 — 2026-04-21
FileHash-SHA1 4ebfa2d967ce7983790b77a3987cb1c5d1b868f2 — 2026-04-21
FileHash-SHA1 559052799a52d1b29ac7e87935e9a0c80df5fb16 — 2026-04-21
FileHash-SHA1 58af8d0e3e77f8d16a5a42fc173ebccb5ecb1cd0 — 2026-04-21
FileHash-SHA1 5e9d1be3cc70d617cba3953cc901e304951ea8cb — 2026-04-21
FileHash-SHA1 6b186f2881729a977beb6aecb61ac0fe83c5777d — 2026-04-21
FileHash-SHA1 7a8963d123918ca86727649492cd1ff4e020cb72 — 2026-04-21
FileHash-SHA1 9c5cc25e80df75f91873bf31a6269e7bdab7c6d2 — 2026-04-21
FileHash-SHA1 a42b4914b0c8dc47a3a5f8114d0fcbef02d84e0a — 2026-04-21
FileHash-SHA1 be3c8f93e9d7f42ec1133ab36f555b104b23fe1b — 2026-04-21
FileHash-SHA1 c16099c29ccdb34764e4d15b1dab2d141d159950 — 2026-04-21
FileHash-SHA1 cecf87d582b4df4323eaef04c9a648d43325043a — 2026-04-21
FileHash-SHA1 de9707a8505683930fccf5536e311242425d420a — 2026-04-21
FileHash-SHA1 e2e8516b4f275e8c636620b7377ee3b9f9f47bb0 — 2026-04-21
FileHash-SHA1 fa49d1fd5a938b3de0840759db62867e6382cea1 — 2026-04-21
FileHash-SHA256 077ab28d66abdafad9f5411e18d26e87fe43da1410ee8fe846bd721ab0cb52de — 2026-04-21
FileHash-SHA256 0f9cf1cf8d641562053ce533aaa413754db88e60404cab6bbaa11f2b2491d542 — 2026-04-21
FileHash-SHA256 1319d474d19eb386841732c728acf0c5fe64aa135101c6ceee1bd0369ecf97b6 — 2026-04-21
FileHash-SHA256 1d984d4b2b508b56a77c9a567fb7a50c858e672d56e8cf7677a1fca5c98c95d1 — 2026-04-21
FileHash-SHA256 24857fe82f454719cd18bcbe19b0cfa5387bee1022008b7f5f3a8be9f05e4d14 — 2026-04-21
FileHash-SHA256 2a00705cfd3c15cf8913e9eb4e23968efd06f1feceaef9987d26c5518887d043 — 2026-04-21
FileHash-SHA256 2a09bbb3d1ddb729ea7591f197b5955453aa3769c6fb98a5ef60c6e4b7df23a5 — 2026-04-21
FileHash-SHA256 2b7d8a519f44d3105e9fde2770c75efb933994c658855dca7d48c8b4897f81e6 — 2026-04-21
FileHash-SHA256 3916604ebd3eab1dec27e4ad904e3a0d50c671ee1559c35ae116975338197f2e — 2026-04-21
FileHash-SHA256 3df9dcc45d2a3b1f639e40d47eceeafb229f6d9e7f0adcd8f1731af1563ffb90 — 2026-04-21
FileHash-SHA256 42a5db2a020155b2adb77c00cbe6c6ad27c2285d8c6114679d9d34137e870b3f — 2026-04-21
FileHash-SHA256 4aef998e3b3f6ca21c78ed71732c9d2bdcc8a4e0284f51d7462c79d446fbc7be — 2026-04-21
FileHash-SHA256 500ee77471669175b359bf57384291cab791200191d0e5a5bb190da53ccb30ee — 2026-04-21
FileHash-SHA256 64263640a6fdeb2388bca2e9094a17065308cf8dcb0032454c0a71d9b78327eb — 2026-04-21
FileHash-SHA256 64cf334716f15da1db7981fad6c81a640d94aa1d65391ef879f4b7b6edf6e7f1 — 2026-04-21
FileHash-SHA256 7467f326677a4a2c8576e71a832e297e794ea00e9b67c4fcbe78b5aec697cec4 — 2026-04-21
FileHash-SHA256 74db1f653da6de134bdc526412a517a30b6856de9c3e5d0c742cb5fe9959ad0d — 2026-04-21
FileHash-SHA256 7c30c16e7a311dc0cdb1cdfd9ea6e502f44c027328dbe7d960b9bcd85ccf5eef — 2026-04-21
FileHash-SHA256 94f05495eb1b2ebe592481e01d3900615040aa02bd1807b705a50e45d7c53444 — 2026-04-21
FileHash-SHA256 a4bd1371fe644d7e6898045cc8e7b5e1562bdfd0e4871d46034e29a22dec6377 — 2026-04-21
FileHash-SHA256 a92d28f1d32e3a9ab7c3691f8bfca8f7586bb0666adbba47eab3e1a8faf7ecc0 — 2026-04-21
FileHash-SHA256 b0af82de672d81f3c2f153977923b3884a8a9e7045b182c2379b19a1996931a0 — 2026-04-21
FileHash-SHA256 bd8203ab88983bc081545ff325f39e9c5cd5eb6a99d04ae2a6cf862535c9829a — 2026-04-21
FileHash-SHA256 c7cf1575336e78946f4fe4b0e7416b6ebe6813a1a040c54fb6ad82e72673478e — 2026-04-21
FileHash-SHA256 ddceade244c636435f2444cd4c4d3dc161981f3af1f622c03442747ecef50888 — 2026-04-21
FileHash-SHA256 ddf75e118db8a5614483ee7e7528a3e2621901059899a8a497335bdef2fba437 — 2026-04-21
URL https://dd3.filedwnl.top — 2026-04-21
URL https://dd4.filedwnl.top — 2026-04-21
domain serialmenot.com — 2026-04-21
hostname dd3.filedwnl.top — 2026-04-21
hostname dd4.filedwnl.top — 2026-04-21
References (1)
↗ https://www.cyberproof.com/blog/iranian-apt-seedworm-targets-global-organizations-via-microsoft-teams/