← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Credit Tr1sha111 Clone ["Muddying the Tracks: The State-Sponsored Shadow"]
WHITE msudosos 2026-05-07 Modified: 2026-05-12
39
IOCs
MEDIUM VOLUME
descriptionc2 urltoolservice binarydwservicebackgroundsource ipmicrosoft teamsquick assist
Indicators of Compromise (10 / 39 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 IPv4 domain CVE URL
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 1319d474d19eb386841732c728acf0c5fe64aa135101c6ceee1bd0369ecf97b6 — 2026-05-07
FileHash-SHA256 24857fe82f454719cd18bcbe19b0cfa5387bee1022008b7f5f3a8be9f05e4d14 — 2026-05-07
FileHash-SHA256 3df9dcc45d2a3b1f639e40d47eceeafb229f6d9e7f0adcd8f1731af1563ffb90 — 2026-05-07
FileHash-SHA256 a3bac548b5bc91c526b4d6707623ddbd1a675aa952f0d1f9a0aa6f7230f09f23 — 2026-05-07
FileHash-SHA256 a47cd0dc12f0152d8f05b79e5c86bac9231f621db7b0e90a32f87b98b4e82f3a — 2026-05-07
FileHash-SHA256 a92d28f1d32e3a9ab7c3691f8bfca8f7586bb0666adbba47eab3e1a8faf7ecc0 — 2026-05-07
FileHash-SHA256 bfc1675ee1e358db8356f515aaded7962923e426aa0a0a1c0eddfc4dab053f89 — 2026-05-07
FileHash-SHA256 c86ab27100f2a2939ac0d4a8af511f0a1a8116ba856100aae03bc2ad6cb0f1e0 — 2026-05-07
FileHash-SHA256 cd098eddb23f2d2f6c42271ca82803b0d5ac950cb82a9b8ae0928e83945a53df — 2026-05-07
FileHash-SHA256 cf3dfd1d6626fd2129abb7a5983c11827f4b0d497e2dba146a1889bd71f23cd5 — 2026-05-07
References (1)
↗ https://www.rapid7.com/blog/post/tr-muddying-tracks-state-sponsored-shadow-behind-chaos-ransomware/