← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
A rigged game: compromises gaming platform in a supply-chain attack
WHITE APT37 Tr1sa111 2026-05-06 Modified: 2026-05-06
39
IOCs
MEDIUM VOLUME
supply-chain attackbirdcallandroid trojanyanbian targetinggaming platform compromise
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
BirdCall ROKRAT - S0240
Indicators of Compromise (39)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 23a1eacad84be4f2c5830755b1948582 — 2026-05-06
FileHash-MD5 3d3d2dc34f01bcf890f185a5421836c7 — 2026-05-06
FileHash-MD5 72ac1287a8d71b27c437ec1f379ab506 — 2026-05-06
FileHash-MD5 7331602726f61959d8f0e7820d457370 — 2026-05-06
FileHash-MD5 a0830ce48537ba052f1d3b905d11a5bf — 2026-05-06
FileHash-MD5 a48b62e55a692bf6d1046d2be64d7150 — 2026-05-06
FileHash-SHA1 01a33066fbc6253304c92760916329abd50c3191 — 2026-05-06
FileHash-SHA1 03e3ece9f48cf4104aafc535790ca2fb3c6b26cf — 2026-05-06
FileHash-SHA1 21ca0287ec5eaee8fb2f5d0542e378267d6ca0a6 — 2026-05-06
FileHash-SHA1 2b81f78ec4c3f8d6cf8f677d141c5d13c35333af — 2026-05-06
FileHash-SHA1 2c6cc71b7e7e4b28c2c176b504bc5bdb687c4d41 — 2026-05-06
FileHash-SHA1 409c5acaed587f62f7e23da47f72c4d9ec3144d9 — 2026-05-06
FileHash-SHA1 59a9b9d47ae36411b277544f25ad2cc955d8dd2c — 2026-05-06
FileHash-SHA1 5b70453ab58824a65ed0b6175c903aa022a87d6a — 2026-05-06
FileHash-SHA1 7356d7868c81499fb4e720f7c9530e5763b4c1d0 — 2026-05-06
FileHash-SHA1 95bdb94f6767a3cce6d92363bbf5bc84b786bdb0 — 2026-05-06
FileHash-SHA1 b06110e0feb7592872e380b7e3b8f77d80dd1108 — 2026-05-06
FileHash-SHA1 d9a369e328ea4f1b8304b6e11b50275f798e9d6b — 2026-05-06
FileHash-SHA1 f9f6c0184cee9c1e4e15c2a73e56d7b927ea685b — 2026-05-06
FileHash-SHA1 fc0c691db7e2d2bd3b0b4c1e24d18df72168b7d9 — 2026-05-06
FileHash-SHA256 185633e5dbe9235fc7e6a1ccb8631650afefd8f7da88c5c07d9b99ea38159822 — 2026-05-06
FileHash-SHA256 33d887ca2e57fa03fc807dfba5376bf96718ee88f56e90d95ee4896a2c019bd0 — 2026-05-06
FileHash-SHA256 415b253a81e67c8c860a97c73edc9017ce732b3c025d943d3b1a445b4ac82822 — 2026-05-06
FileHash-SHA256 5aa7afd790481ad98357636fa4d9927ae01111409c8d7ce69998d2485c1d5e6f — 2026-05-06
FileHash-SHA256 95cda8431419f77407484ab72dc1e356421dcd801eccabe8869f77ee0eb58eb2 — 2026-05-06
FileHash-SHA256 dfa9c6adac98311d0f62e0eeecb947d92f7bda41ddf4ce9a6f9e20af7990422d — 2026-05-06
domain 1980food.co.kr — 2026-05-06
domain cndsoft.co.kr — 2026-05-06
domain colorncopy.co.kr — 2026-05-06
domain sejonghaeun.com — 2026-05-06
hostname www.inodea.com — 2026-05-06
hostname www.lawwell.co.kr — 2026-05-06
FileHash-MD5 a8fe823d451d636d0a0366c0629ef5c3 — 2026-05-06
domain inodea.com — 2026-05-06
domain sqgame.com — 2026-05-06
domain sqgame.com.cn — 2026-05-06
domain zohomail.com — 2026-05-06
hostname www.sqgame.net — 2026-05-06
hostname xiazai.sqgame.com.cn — 2026-05-06
References (1)
↗ https://www.welivesecurity.com/en/eset-research/rigged-game-scarcruft-compromises-gaming-platform-supply-chain-attack/