← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Lotus Blossum
WHITE UCP_GoA23 2026-04-30 Modified: 2026-05-30
380
IOCs
HIGH VOLUME
d3bf06f3c6b8cf115f386f853939819f22bb0b9c412ac3696c143ea3440e5bc3 - 04.29.26 - Bitdefender Renamed Submission Wizard & Lotus Blossum LOTUS PANDA (Malpedia) aka: ATK1, BRONZE ELGIN, Billbug, DRAGONFISH, G0030, Lotus BLossom, Lotus Blossom, Red Salamander, ST Group, Spring Dragon Lotus Blossom is a threat group that has targeted government and military organizations in Southeast Asia.
Indicators of Compromise (35 / 380 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname CVE
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 38db37b090f963ab6be7ac3d9bee6a91 MD5 of 0000091f9706020523490186f1fb73ebc316f649571802d9df16dd0052f67ea3 2026-04-30
FileHash-MD5 03d8b44e058fdf28daf7fa6d86758925 MD5 of fb6e8adc90db90f6562e82d2f057e891e316da0b85376b9f88df2243efcea4e9 2026-04-30
FileHash-MD5 086ca5d375188da9557b1c83bf864463 MD5 of f286fa845f03e0781763ac2eb110390f9e5c1ff18fa20db844465eb46e8264c5 2026-04-30
FileHash-MD5 0bdf704b82575a43a227f1959c430b95 MD5 of 75a197152306a2f6cef1ceedc8c563521faf7434e1b333c09cce65c39748bbd3 2026-04-30
FileHash-MD5 18e5fe4b07d35f344f128648a7edaa08 MD5 of 3ab973236992756da0d79e2f634dd06ceb83bed9dc015cee0074cf26406c7e24 2026-04-30
FileHash-MD5 1cbf3e91815383664fa0bd5a48b3faa0 MD5 of dc8f0117287729a5c27fb04a68186f034c4a093b33d60867ae65d9e8ea413106 2026-04-30
FileHash-MD5 1ebcc2e2cb13388272d46427a473dc4c MD5 of ef3ed99455e193bf67cf16ad5f4de7d3e6cd527d18b5ca5a72eed15f6da77658 2026-04-30
FileHash-MD5 41dbee51d7c27d44daf57d2e112de0d5 MD5 of 80c2084ba85873499c6d6b5e869acaeb8cfd9fba8720676fc81ae34fd7b94e71 2026-04-30
FileHash-MD5 6ef3132ea7de5319a1ae7a9382f3c2a8 MD5 of 1f37123247298a501eca04373695d9a6230e7df4c0579cb1732804c62e094ac0 2026-04-30
FileHash-MD5 73faacbcdc7822a038c4e3786814611d MD5 of 411d4b3df3807e19bca735fd7415be9bbbfa9a87293a2d16bc53dda75845e50f 2026-04-30
FileHash-MD5 7adf4d4d8a82a55c9412e03a38301fca MD5 of 13999bae6eaa45724faaa587ff3eb16747b6049543dc92fa5ae8c211e5f9ae7c 2026-04-30
FileHash-MD5 87d0438da3ba38c61195a4a23410a3a0 MD5 of 0000f89067d9fbf51cad68aedb0866b1b233056f4b1d704162721aa274ef0d22 2026-04-30
FileHash-MD5 915e46ebdd834bec8c4de6ab2c1ea2e6 MD5 of 00000534fae536364d2f7ec107d98f5227638f3a3a54968b7eddb4f578f3b243 2026-04-30
FileHash-MD5 9c2315ca5a789b57c707a09ac1373d6c MD5 of 0000057d8815c841a6eb3a2579f93bbf4647838d2cea489e9fcf566a92e2660b 2026-04-30
FileHash-MD5 a17e88a5a8a408fd775410d404d57dea MD5 of 0000065165bca1fb7f7d913edaa7e4cfec922627783c2aea7df129472aaa710f 2026-04-30
FileHash-MD5 a9c37579a1533daed7672d2640ab0ecc MD5 of d305201937be393085a1d7216ac3734871d5fdff89f5f548682bcc410e2086ee 2026-04-30
FileHash-MD5 aaddb47104d94939d9d2caa975db2cab MD5 of 00000006e9d3a7e85d1f1e7711787b9a117655e249a565122ee12e9962199007 2026-04-30
FileHash-MD5 b75d0599797296ce0d5baa0a8674de9b MD5 of 0000098f9ee549903446e74267e3a638192bd374f1c05373b0671e5418b323b0 2026-04-30
FileHash-MD5 c5d2ef60fcc840904aafd1560ba1d45a MD5 of 2542415ae934de41b4160284f2e6fe4f4e99e14d5fbb2a620073b554e4c5f6c5 2026-04-30
FileHash-MD5 ee64448ba271f86de70b9f84fd8d5ef7 MD5 of 000000f24100cf5d9bf816c89f9bb5f538f5c703a89a6d6c58afb15c00b38fcb 2026-04-30
FileHash-MD5 fc497b368d79b3369a6f3f915d81f155 MD5 of 0000b9d43cfea9d566c0f0cd73007146c8eb82303cc41906cabd75b8bf67aa76 2026-04-30
FileHash-MD5 869b85d8004b64fbef4d4ae9d4b20f00 MD5 of a511be5164dc1122fb5a7daa3eef9467e43d8458425b15a640235796006590c9 2026-04-30
FileHash-MD5 0a77eecbd9bf6aa33671d3f04ef94ad5 MD5 of 078a9e5c6c787e5532a7e728720cbafee9021bfec4a30e3c2be110748d7c43c5 2026-04-30
FileHash-MD5 170e8c92111a6234c3d663e9a35f7f86 MD5 of 831e1ea13a1bd405f5bda2b9d8f2265f7b1db6c668dd2165ccc8a9c4c15ea7dd 2026-04-30
FileHash-MD5 28cb7b261f4eb97e8a4b3b0d32f8def1 MD5 of 2da00de67720f5f13b17e9d985fe70f10f153da60c9ab1086fe58f069a156924 2026-04-30
FileHash-MD5 32f3c40b0ed1c5cf23430be7f9eb7b06 MD5 of 3bdc4c0637591533f1d4198a72a33426c01f69bd2e15ceee547866f65e26b7ad 2026-04-30
FileHash-MD5 55921689bddd723f95f1a1e9b8f782e2 MD5 of 77bfea78def679aa1117f569a35e8fd1542df21f7e00e27f192c907e61d63a2e 2026-04-30
FileHash-MD5 6aed7e49bd6c10c4eaee34f8c0eaa055 MD5 of e7cd605568c38bd6e0aba31045e1633205d0598c607a855e2e1bca4cca1c6eda 2026-04-30
FileHash-MD5 9aea520c7e94d23a32fda93776d4f840 MD5 of f4d829739f2d6ba7e3ede83dad428a0ced1a703ec582fc73a4eee3df3704629a 2026-04-30
FileHash-MD5 b524722db5a0f45718394b1217f02138 MD5 of 4c2ea8193f4a5db63b897a2d3ce127cc5d89687f380b97a1d91e0c8db542e4f8 2026-04-30
FileHash-MD5 b528771daa269af307e87f73016d6d49 MD5 of 8ea8b83645fba6e23d48075a0d3fc73ad2ba515b4536710cda4f1f232718f53e 2026-04-30
FileHash-MD5 c1b1cad9e7afabfacd8988c2a6182a20 MD5 of b4169a831292e245ebdffedd5820584d73b129411546e7d3eccf4663d5fc5be3 2026-04-30
FileHash-MD5 cf51dbe3926ba5e288fee3f17ef73aa7 MD5 of 7add554a98d3a99b319f2127688356c1283ed073a084805f14e33b4f6a6126fd 2026-04-30
FileHash-MD5 e776de5a5ab104ba814d6a70c27ecc42 MD5 of fcc2765305bcd213b7558025b2039df2265c3e0b6401e4833123c461df2de51a 2026-04-30
FileHash-MD5 f82649cd2916cf2f28cf450a7c1ca51f MD5 of 0a9b8df968df41920b6ff07785cbfebe8bda29e6b512c94a3b2a83d10014d2fd 2026-04-30
References (5)
↗ https://www.virustotal.com/graph/embed/g3b6db1f2b1d74e569bcf8eadfa2dd64f7fc608cc250c4910b1ab9dc0eb4d5b32?theme=dark ↗ https://www.virustotal.com/gui/collection/2de6ecd25ac73148e5c495ed2d6b16f1f205a1ab0281f4f7ba4be722c315f8fe/iocs ↗ https://www.virustotal.com/gui/collection/2de6ecd25ac73148e5c495ed2d6b16f1f205a1ab0281f4f7ba4be722c315f8fe/summary ↗ https://malpedia.caad.fkie.fraunhofer.de/actor/lotus_panda ↗ https://www.rapid7.com/blog/post/tr-chrysalis-backdoor-dive-into-lotus-blossoms-toolkit/