← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia
WHITE SHADOW-EARTH-053 Tr1sa111 2026-05-05 Modified: 2026-05-30
96
IOCs
HIGH VOLUME
vshellproxylogon exploitationgodzillaexchange server compromiseringqgodzilla webshellshadowpadnoodlerat
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
GODZILLA ShadowPad - S0596 POISONPLUG.SHADOW NOODLERAT RingQ IOX VShell
Indicators of Compromise (6 / 96 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname CVE
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 0933fbd16c7a8b70199f5612e147a22c — 2026-05-05
FileHash-MD5 2616e7ec2d6c4b86a7fa1f4a762ae918 — 2026-05-05
FileHash-MD5 531da3715b1e4fc9baeaa034888ac419 — 2026-05-05
FileHash-MD5 a85459a1ec90a52b5c1f2f5a12bb2d10 — 2026-05-05
FileHash-MD5 7c698dd4090564b179309c2a64266424 — 2026-05-05
FileHash-MD5 e5e0e0c0fadacee1105bd340fa1b2e6d — 2026-05-05
References (1)
↗ https://www.trendmicro.com/en_us/research/26/d/inside-shadow-earth-053.html