← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
xlabs_v1 DDoS-for-Hire Operation Exposed: How an Operator's Debug Build Unraveled a Commercial Game-Server Botnet
WHITE CyberHunter_NL 2026-05-05 Modified: 2026-05-05
20
IOCs
MEDIUM VOLUME
figuretcp80c2 domainoffshore lctadashidefense evasiontcp5555chacha20as214472netherlandsaprilexploitmiraiandroidpersistencedemobotnetbridgeacceptphishingtelegrambeyondclosestop
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (3 / 20 total)
All IPv4 CIDR FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 5c3468e3c7a535b74fa91927fb1572d8 MD5 of 31a60f9e0b5b4f0371f4130a184e27f79cefacb080a6273ccb1c9a908dc6ca9d 2026-05-05
FileHash-MD5 78774672884f8cd7593fced3c7d1faa4 MD5 of a03705fc225dbcec7e3c2f06a258afe81b5d88aaff1368d10dd6ba4f0932be7c 2026-05-05
FileHash-MD5 fac068afc5a0361f323f8b2fdbcbfd41 MD5 of f962cb443975065b91d4512a42a529a091726e1815be28ced0ebb9dff997931d 2026-05-05
References (1)
↗ https://hunt.io/blog/xlabs-v1-ddos-for-hire-operation-exposed