← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
xlabs_v1 DDoS-for-Hire Operation Exposed: How an Operator's Debug Build Unraveled a Commercial Game-Server Botnet
WHITE CyberHunter_NL 2026-05-05 Modified: 2026-05-05
20
IOCs
MEDIUM VOLUME
figuretcp80c2 domainoffshore lctadashidefense evasiontcp5555chacha20as214472netherlandsaprilexploitmiraiandroidpersistencedemobotnetbridgeacceptphishingtelegrambeyondclosestop
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (3 / 20 total)
All IPv4 CIDR FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 98182f78f2ee76f3dffa58c268dd9e653c711ce5 SHA1 of 31a60f9e0b5b4f0371f4130a184e27f79cefacb080a6273ccb1c9a908dc6ca9d 2026-05-05
FileHash-SHA1 da365650e77eaf9d79801d475de7bf2b2a031251 SHA1 of f962cb443975065b91d4512a42a529a091726e1815be28ced0ebb9dff997931d 2026-05-05
FileHash-SHA1 dbcf1c93634010c7e6131bcdfffa72e30da2376a SHA1 of a03705fc225dbcec7e3c2f06a258afe81b5d88aaff1368d10dd6ba4f0932be7c 2026-05-05
References (1)
↗ https://hunt.io/blog/xlabs-v1-ddos-for-hire-operation-exposed