← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Credit Tr1sha111 Clone ["Muddying the Tracks: The State-Sponsored Shadow"]
WHITE msudosos 2026-05-07 Modified: 2026-05-12
39
IOCs
MEDIUM VOLUME
descriptionc2 urltoolservice binarydwservicebackgroundsource ipmicrosoft teamsquick assist
Indicators of Compromise (7 / 39 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 IPv4 domain CVE URL
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 1eee5cdd7f8a75caf0b2f446724bd50f MD5 of cd098eddb23f2d2f6c42271ca82803b0d5ac950cb82a9b8ae0928e83945a53df 2026-05-07
FileHash-MD5 2115e69f71d9f51a6c6c2effdaee2df2 MD5 of 3df9dcc45d2a3b1f639e40d47eceeafb229f6d9e7f0adcd8f1731af1563ffb90 2026-05-07
FileHash-MD5 439c0a0a46627bd166e08436f383ad56 MD5 of 24857fe82f454719cd18bcbe19b0cfa5387bee1022008b7f5f3a8be9f05e4d14 2026-05-07
FileHash-MD5 71c0e655a6c3455f106b130b0c191465 MD5 of bfc1675ee1e358db8356f515aaded7962923e426aa0a0a1c0eddfc4dab053f89 2026-05-07
FileHash-MD5 7f3c8a7fe78d3d05b6022df3ea0c15fb MD5 of a92d28f1d32e3a9ab7c3691f8bfca8f7586bb0666adbba47eab3e1a8faf7ecc0 2026-05-07
FileHash-MD5 b699cd483879203c6157a79646dfda55 MD5 of cf3dfd1d6626fd2129abb7a5983c11827f4b0d497e2dba146a1889bd71f23cd5 2026-05-07
FileHash-MD5 f8560b9a893eeb2130fc7159e9c1b851 MD5 of 1319d474d19eb386841732c728acf0c5fe64aa135101c6ceee1bd0369ecf97b6 2026-05-07
References (1)
↗ https://www.rapid7.com/blog/post/tr-muddying-tracks-state-sponsored-shadow-behind-chaos-ransomware/