PULSE NAME
xlabs_v1 DDoS-for-Hire Operation Exposed: How an Operator's Debug Build Unraveled a Commercial Game-Server Botnet
WHITE CyberHunter_NL 2026-05-05 Modified: 2026-05-05
20
IOCs
MEDIUM VOLUME
Indicators of Compromise (20)
All IPv4 CIDR FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
IPv4 176.65.139.44 CC=DE ASN=ASNone 2026-05-05
IPv4 176.65.139.42 CC=DE ASN=ASNone 2026-05-05
IPv4 176.65.139.9 CC=DE ASN=ASNone 2026-05-05
CIDR 172.94.96.0/24 2026-05-05
CIDR 176.65.139.0/24 2026-05-05
FileHash-MD5 5c3468e3c7a535b74fa91927fb1572d8 MD5 of 31a60f9e0b5b4f0371f4130a184e27f79cefacb080a6273ccb1c9a908dc6ca9d 2026-05-05
FileHash-MD5 78774672884f8cd7593fced3c7d1faa4 MD5 of a03705fc225dbcec7e3c2f06a258afe81b5d88aaff1368d10dd6ba4f0932be7c 2026-05-05
FileHash-MD5 fac068afc5a0361f323f8b2fdbcbfd41 MD5 of f962cb443975065b91d4512a42a529a091726e1815be28ced0ebb9dff997931d 2026-05-05
FileHash-SHA1 98182f78f2ee76f3dffa58c268dd9e653c711ce5 SHA1 of 31a60f9e0b5b4f0371f4130a184e27f79cefacb080a6273ccb1c9a908dc6ca9d 2026-05-05
FileHash-SHA1 da365650e77eaf9d79801d475de7bf2b2a031251 SHA1 of f962cb443975065b91d4512a42a529a091726e1815be28ced0ebb9dff997931d 2026-05-05
FileHash-SHA1 dbcf1c93634010c7e6131bcdfffa72e30da2376a SHA1 of a03705fc225dbcec7e3c2f06a258afe81b5d88aaff1368d10dd6ba4f0932be7c 2026-05-05
FileHash-SHA256 079ae4f813939dd96b961ae288fb7f930649dfebb4884c13af95309a71f986f5 2026-05-05
FileHash-SHA256 31a60f9e0b5b4f0371f4130a184e27f79cefacb080a6273ccb1c9a908dc6ca9d 2026-05-05
FileHash-SHA256 8367daa8ce633724157b8edd21d625de5ac56b8c2d983bbb283836162037f3c1 2026-05-05
FileHash-SHA256 a03705fc225dbcec7e3c2f06a258afe81b5d88aaff1368d10dd6ba4f0932be7c 2026-05-05
FileHash-SHA256 f962cb443975065b91d4512a42a529a091726e1815be28ced0ebb9dff997931d 2026-05-05
FileHash-SHA256 fa965ed784f7ec99e21475205cc177bb71ac7550b4015b4a4b3e232f032dcb91 2026-05-05
IPv4 172.94.96.75 CC=US ASN=ASNone 2026-05-05
IPv4 176.65.139.134 CC=DE ASN=ASNone 2026-05-05
domain xlabslover.lol 2026-05-05