Pulse Detail — Threat Intelligence

PULSE NAME

IOC - OceanLotus suspected of using PyPI to deliver ZiChatBot malware

WHITE APT32 celestre 2026-05-09 Modified: 2026-05-09

IOCs

MEDIUM VOLUME

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

MALWARE FAMILIES

ZiChatBot

Indicators of Compromise (9 / 37 total)

All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA256	08a75a092e9793b6d3eb473c246d3c5e4750cd525342276d8bf1ab7d1fe45112	—	2026-05-09
FileHash-SHA256	2b5225816089467aacdcd201a44989a2f78491c29f6fad41b52731bfefc1b886	—	2026-05-09
FileHash-SHA256	437a824e63975a350108e20881020ad288fb6343d4f61fff7d64811270219dea	—	2026-05-09
FileHash-SHA256	50d2fb75ef2bb56915e28595574663d8a1e0193e335e3e4f0ad2c0a4770fd787	—	2026-05-09
FileHash-SHA256	68dfa75e916f4fb44a071851965493a324d331e37b791e21c45feba54aec23d8	—	2026-05-09
FileHash-SHA256	be19d98b5449a052c03b189d9687543d619c8c1893f12709ef6bef6ff7657510	—	2026-05-09
FileHash-SHA256	c7e93e50f1f241e63e738925e4f8c7f8ee004506723c2b49ed0789100f4ce4ba	—	2026-05-09
FileHash-SHA256	d05d6b08078b3d153ab821cd4dd6b5f5bd390c007c6d01653f459c35b917b80c	—	2026-05-09
FileHash-SHA256	f85f44ebdd341f22f0cbd408ee40f162d697fc48c3824c897b61980fa38a4d92	—	2026-05-09

References (1)