← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
xlabs_v1 DDoS-for-Hire Operation Exposed: How an Operator's Debug Build Unraveled a Commercial Game-Server Botnet
WHITE CyberHunter_NL 2026-05-05 Modified: 2026-05-05
20
IOCs
MEDIUM VOLUME
figuretcp80c2 domainoffshore lctadashidefense evasiontcp5555chacha20as214472netherlandsaprilexploitmiraiandroidpersistencedemobotnetbridgeacceptphishingtelegrambeyondclosestop
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (6 / 20 total)
All IPv4 CIDR FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 079ae4f813939dd96b961ae288fb7f930649dfebb4884c13af95309a71f986f5 — 2026-05-05
FileHash-SHA256 31a60f9e0b5b4f0371f4130a184e27f79cefacb080a6273ccb1c9a908dc6ca9d — 2026-05-05
FileHash-SHA256 8367daa8ce633724157b8edd21d625de5ac56b8c2d983bbb283836162037f3c1 — 2026-05-05
FileHash-SHA256 a03705fc225dbcec7e3c2f06a258afe81b5d88aaff1368d10dd6ba4f0932be7c — 2026-05-05
FileHash-SHA256 f962cb443975065b91d4512a42a529a091726e1815be28ced0ebb9dff997931d — 2026-05-05
FileHash-SHA256 fa965ed784f7ec99e21475205cc177bb71ac7550b4015b4a4b3e232f032dcb91 — 2026-05-05
References (1)
↗ https://hunt.io/blog/xlabs-v1-ddos-for-hire-operation-exposed