PULSE NAME
"don't save her" a continued message * CAPE Sandbox
WHITE msudosos 2026-05-22 Modified: 2026-05-22
669
IOCs
HIGH VOLUME
[sample of the Pigeonhole Sieve malware has been found in the X-Sieve R system, designed to detect and prevent the spread of malicious software, which is currently being used by Microsoft Office.] -pretext
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (43 / 669 total)
All IPv4 CIDR FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain email hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 0005c1a0f0dd0df76abbabf5f3f9303e46639dc29181b907388cf95a919bfdc5 2026-05-22
FileHash-SHA256 039fe79b74e6d3d561e32d4af570e6ca70db6bb3718395be2bf278b9e601279a 2026-05-22
FileHash-SHA256 0a4d7e4860afac36c43f2e5272678b7e267b46618ab46a596dd28dbc4c5915e3 2026-05-22
FileHash-SHA256 0f236575a2926ebe24d335a2b775b05a11d90b90979cde6bf51ba6fc37bc86e8 2026-05-22
FileHash-SHA256 22aa981f10e839fbf2c5c3a8f3de7caa2f9c3add7af4750420fd2b1a05be1709 SHA256 of 6c865cb3a2b51a3ef44235986b25dd541563bace 2026-05-22
FileHash-SHA256 24d6742653761510338bb242f67a627d03a7ccf98f0ab8d21292034f9bb3bd34 2026-05-22
FileHash-SHA256 272ebfe7b95a7645dcd937ac22a6ef6cac4163f0112dbf673e7e9b875494da48 2026-05-22
FileHash-SHA256 452acbf807a408b767ad4318d01e17053499521dc201aa502e47950726872c83 2026-05-22
FileHash-SHA256 48e537902c03a3eee4790fc97ee072cddc7c1a90122702dd18243d8c12a0d99a 2026-05-22
FileHash-SHA256 6c1b1e6b7a1f5a9499a3f7c66939b933d89efd7bff818255f57cd182c7474650 2026-05-22
FileHash-SHA256 6f485d3818f401926a178a7d9c5c03ce3fd766afa5ec0adb969a3b49b90fafe8 2026-05-22
FileHash-SHA256 7dfd9f131494d23952f4428b9a6d20f358910796729c7ac4815f76a14b3c643e 2026-05-22
FileHash-SHA256 8b064ebb257b55ee09b619b791475058b4d9d2b90907ec727e70235e5b25b730 2026-05-22
FileHash-SHA256 97da3c982874ec87dcba39e8ae9e8c8df8acd4e06f360a8a4179b82fa0014346 2026-05-22
FileHash-SHA256 a48c02fd36302685b5fbb3691db0fb2c4aca77c0b3b1df9aa7ec6f154affa0a8 2026-05-22
FileHash-SHA256 bb9e7089d7cc26f9223f1bad119c3b4af4fc77f479f145ef201c8802e1dd06b1 2026-05-22
FileHash-SHA256 d1614ad99aded9f6f5c1be7fe7ffa5124bd04a526580da3818ea8a954e852aa6 2026-05-22
FileHash-SHA256 d4d3a3400d6b61623a87c10e606144c78877dd06bede31ab0315b16a79b093aa 2026-05-22
FileHash-SHA256 e11eb59cf535da90ef6617ac9256138659a8420b47afbe8749a8076fbdcd29bc 2026-05-22
FileHash-SHA256 ee9e288c3495fd548fd49095be08807f215fc0780064e179011098c0c7461a34 2026-05-22
FileHash-SHA256 03eb9e501fd0c7506001ff8b55d9871e098dab32eb35bb7ad1ce9fbcc5972244 2026-05-22
FileHash-SHA256 3799b955a16e889fd062a36033bb263519736b96af5919e99161bf8731ae5349 2026-05-22
FileHash-SHA256 554ff792e5ac9e50d720e64a0436d1420460744115bec48989fb7510acd443ee 2026-05-22
FileHash-SHA256 6689466eb9fd07367f08e133b27ecf16ce4c65d85d771c7cf4fdc24db838bb8f 2026-05-22
FileHash-SHA256 691d4b207806abd0b1601020a7fdb57cb40f62d124e4d835c8565410bd22e1a8 2026-05-22
FileHash-SHA256 96c6a9e9f747bd54f5115330e362f4ba55eab5fc69de628b4ecfbe8a936660f3 2026-05-22
FileHash-SHA256 a0a58f982d333a88178dc53fdbd4db96df1278cc17849e2e5d9d0353a48365b3 2026-05-22
FileHash-SHA256 abc460ffc4911375166ee8ae05a4fd9540f44e91ee47163d3ed8d08a84b41bf1 2026-05-22
FileHash-SHA256 bde8f322f87d77d663cee250b70b38ba48743413661d5a3f826f7b2ce359111b 2026-05-22
FileHash-SHA256 bf12cf5df72711ec417802e058d53600a8d6846bd13785f70ef27cc9c57cb27c 2026-05-22
FileHash-SHA256 dfbde381fde1a284c81a72d06a1a43faf49cd1c085c87234e34e50b881567806 2026-05-22
FileHash-SHA256 ea0d63750bd2207751eed65d68192b946d2bef446d4362b3f49ddbc1b438c6cf 2026-05-22
FileHash-SHA256 fa6f9722c1b9542271766681a939b53f7e0c2616155f41b72b6debb0e65aed6b 2026-05-22
FileHash-SHA256 fb117cb946078e580545892d7d5a31478322fc37cc7123f369ee9e7cecb5627d 2026-05-22
FileHash-SHA256 0002412eddb6f812afb3e131d7e801536cb4ff8a410a6d6c6bc559fdb3546116 2026-05-22
FileHash-SHA256 19d5801a0218e79a4364c1714fb0d97bf0272a7c3b18460b1cfcfb1072956363 2026-05-22
FileHash-SHA256 23dc19d0ca3cf3738429fbbf05df7aad240aced5a4d72b0b47c0435844274b27 2026-05-22
FileHash-SHA256 5175e010d26f4f56870de21e3ad35d039892472223cc09046e3199d2ead76e4f 2026-05-22
FileHash-SHA256 540e69d56a414a48fcb35e34639f509a1ad00f3904e41dbfe5ce03665abf5a38 2026-05-22
FileHash-SHA256 780efc2d7fc37fb8e38f724840bd424e577c6779f803827899f1232477bd0455 2026-05-22
FileHash-SHA256 9a97038c2fadec8bd1cda011633861379394817de31de15fb8a08edc2e536971 2026-05-22
FileHash-SHA256 e92bf381b417055b99716cabb757f6294bc510623d7280e6a7def9384feb0ba6 2026-05-22
FileHash-SHA256 fa5df40e627fc81b5272a945fb96607524293a19c5a6cbffc681cbc951b409ac 2026-05-22
References (3)
↗ https://vtbehaviour.commondatastorage.googleapis.com/0005c1a0f0dd0df76abbabf5f3f9303e46639dc29181b907388cf95a919bfdc5_CAPE%20Sandbox.html?GoogleAccessId=758681729565-rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com&Expires=1779435695&Signature=UoqeOvA3l0SmZPLGLkJ4n7oue%2FoXBTcyhLy5g1zr97R1z9EBf2vAXrsnA8mHkedBOo0cd7lQhlV4QLek1AiAP4Z%2F9XgN%2FgaAo3L%2FP0tI1NFNb5lJ9mZ4YQ5aVcF1jYBD4bluT9%2BjUQaRIkFHR4w4OIpWVuJOGdkbT7UxU%2BgyPR3o2Ij%2Fli0GfJO%2B%2B2KMpTnBE0mWDM%2BrEThJKW2Ty5flTxONg4m7toLl7%2BspvX1Q ↗ https://vtbehaviour.commondatastorage.googleapis.com/0005c1a0f0dd0df76abbabf5f3f9303e46639dc29181b907388cf95a919bfdc5_Zenbox.html?GoogleAccessId=758681729565-rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com&Expires=1779435775&Signature=AkieU7eRCNrzND0lejy10HFR7OdRvNqyswrKIdggTIg6w4naejOYYwut39HnOup0%2BqQcIl4AJ6iCv7BrJuqNoIe3WuL3S3c9To36FuiNd2aOBRNZcN9gHBz7GSvTlAnmNNOt9OIZbdryCE4RnMJA4q7aOGLAd3dJzbXxC1sLLrpBBY0wTeb7cvNcLLEuJzsk9AQw8m9nZ%2BMfQJB8hWxaWNXySZkIl%2Fkufg7NdeYBFT4YXsi2gxWg0UruP%2FFYE8 ↗ https://vtbehaviour.commondatastorage.googleapis.com/0002412eddb6f812afb3e131d7e801536cb4ff8a410a6d6c6bc559fdb3546116_Zenbox.html?GoogleAccessId=758681729565-rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com&Expires=1779436484&Signature=Pr1pfaimFPZRbQFRLBhpICwKcQGlnx4U5y%2FQZiFEs%2BMGp9zOdmylpsondhJ%2FoJg6NIwY9%2Bk2v9SRh8rgNd2aefaWARh%2ByYvcCFEELbz7cf%2F2f128%2FN%2BsNKOuiRC2JFyN37Wq2hSLt9NYUERhB0THMCMQtw1axrtOHh9CLz3YZ%2BdO7E%2B3g1aOrD3sDAwOgmWR9n9pk%2Fj55fIyJqPDU80OB1RXmaU4XNnEIBA69dpnuj57WGWd