Pulse Detail — Threat Intelligence

● 0 online

ANALYZING THREAT INTELLIGENCE

PULSE NAME

Rebex-based Telegram RAT Targeting Vietnam

WHITE Tr1sa111 2026-04-30 Modified: 2026-04-30

15

IOCs

MEDIUM VOLUME

↓ CSV ↓ JSON

multi-stage payload telegram rat chm infection xor encryption shell hijacking rebex library python loader vietnam targeting

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1053.005 T1036.005 T1204.002 T1497.001 T1218.004 T1566.001 T1574.001 T1082 T1140 T1112 T1583.006 T1059.001 T1547.001 T1218.001 T1027 T1059.003 T1071.001 T1105

Indicators of Compromise (5 / 15 total)

All FileHash-MD5 FileHash-SHA1 FileHash-SHA256

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-MD5	4e9e70c2a8002ce4a70ab43ae80c2a25	—	2026-04-30
FileHash-MD5	783698157743014acd2df3e721c1ae4e	—	2026-04-30
FileHash-MD5	b30cfa26e5dbee1665944a7a94b1a07d	—	2026-04-30
FileHash-MD5	b3bf26bfbf7aec43379523bd18b1ec16	—	2026-04-30
FileHash-MD5	ca3401817dd1e29ca3f3212e38ad39cf	—	2026-04-30

References (1)

↗ https://dmpdump.github.io/posts/TelegramRat/