← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Credit Tr1sha111 Clone ["Muddying the Tracks: The State-Sponsored Shadow"]
WHITE msudosos 2026-05-07 Modified: 2026-05-12
39
IOCs
MEDIUM VOLUME
descriptionc2 urltoolservice binarydwservicebackgroundsource ipmicrosoft teamsquick assist
Indicators of Compromise (7 / 39 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 IPv4 domain CVE URL
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 0ba2306ec15f7124fafc7615e81f34c7986ba9a5 SHA1 of a92d28f1d32e3a9ab7c3691f8bfca8f7586bb0666adbba47eab3e1a8faf7ecc0 2026-05-07
FileHash-SHA1 303b24648f609c5aed4b77a06d137a514232963f SHA1 of cd098eddb23f2d2f6c42271ca82803b0d5ac950cb82a9b8ae0928e83945a53df 2026-05-07
FileHash-SHA1 4a54b7237dc9fdd745d0d19083a1ce4857c91de4 SHA1 of 1319d474d19eb386841732c728acf0c5fe64aa135101c6ceee1bd0369ecf97b6 2026-05-07
FileHash-SHA1 559052799a52d1b29ac7e87935e9a0c80df5fb16 SHA1 of 3df9dcc45d2a3b1f639e40d47eceeafb229f6d9e7f0adcd8f1731af1563ffb90 2026-05-07
FileHash-SHA1 835fb3b1e509f031a3028ddfc6e8222bcab26d8c SHA1 of bfc1675ee1e358db8356f515aaded7962923e426aa0a0a1c0eddfc4dab053f89 2026-05-07
FileHash-SHA1 8707744d7df346c7d1189241224ed0d03306114e SHA1 of cf3dfd1d6626fd2129abb7a5983c11827f4b0d497e2dba146a1889bd71f23cd5 2026-05-07
FileHash-SHA1 c16099c29ccdb34764e4d15b1dab2d141d159950 SHA1 of 24857fe82f454719cd18bcbe19b0cfa5387bee1022008b7f5f3a8be9f05e4d14 2026-05-07
References (1)
↗ https://www.rapid7.com/blog/post/tr-muddying-tracks-state-sponsored-shadow-behind-chaos-ransomware/