← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Credit Tr1sa111- "Operation WordDrone" usernote: 22 clicks to clone
WHITE msudosos 2026-04-30 Modified: 2026-05-30
27
IOCs
MEDIUM VOLUME
taiwanwinwordcommandexample codedigiwinmicrosoft wordntdllhttphttpswebsocketaprilconceptprocdumpvirustotalinstallertargetaugustclientendpoint.dll main
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Digiwin ClientEndPoint.dll Main
Indicators of Compromise (3 / 27 total)
All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname IPv4
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 6ab0e2ede4e0968eae2bdc63864971054a534f7b SHA1 of 19bbc2daa05a0e932d72ecfa4e08282aa4a27becaabad03b8fc18bb85d37743a 2026-04-30
FileHash-SHA1 6da5a78f57fcc9e00e76d6c6ae0461a291653cc0 — 2026-04-30
FileHash-SHA1 6e35ae1d5b6f192109d7a752acd939f5ca2b97a6 SHA1 of 8cfb55087fa8e4c1e7bcc580d767cf2c884c1b8c890ad240c1e7009810af6736 2026-04-30
References (1)
↗ https://www.acronis.com/en-us/cyber-protection-center/posts/operation-worddrone-drone-manufacturers-are-being-targeted-in-taiwan/