← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
疑似APT-C-13（Sandworm）组织利用SSH+TOR隧道实现隐蔽持久化的攻击活动分析-安全资讯-360官网
WHITE CyberHunter_NL 2026-04-29 Modified: 2026-04-29
13
IOCs
MEDIUM VOLUME
aptc13sandwormopensshstatepointerwindowsappdataglobalv5s 5pro5sv2 5cm310 k600rootpayloaddecoyshellpython
Indicators of Compromise (1 / 13 total)
All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 0a78005858bef767b39cfbbeb543a80dfde46807ee75594de77d3ddfe119e8b5 SHA256 of 2156c270ffe8e4b23b67efed191b9737 2026-04-29
References (1)
↗ https://www.360.cn/n/13005.html