← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Grok • X • Twitter Vflooder | SystemBC | QNAPCrypt
WHITE Q.Vashti 2026-06-03 Modified: 2026-06-03
4682
IOCs
HIGH VOLUME
I continue to research issues affecting iOS and other smart devices, browsers, search engines and targeted individuals. I will limit my comments as further evaluation is required. Twitter appears to be used as a weapon to abuse of several targeted persons and their schools or businesses. Research is required to determine how. Is Twitter / X a weapon or is it abused by threat actors. Ongoing attacks dating back at least 5 years. || *DESCRIPTION: Detects systembc RAT REFERENCE: https://www.linkedin.com/posts/any-run_systembc-rat-explorewithanyrun-activity-7289971333671645184-Sefp/?utm_source=share&utm_medium=member_ios RULE_AUTHOR: X__Junior #malicious #spyware #twitter #x #ai_ agents #seen_before #systembc #vtflooder #qnapcrypt #cve #checkin #scripiting #injection #extraction #gobinary #operation
sysvbuildidunitedwindows ntmsiegermany as8560yara detectionscontactedz74457024643q1systembctrojanelf executableexec amd6464linuxelf64 operationunixcompilerdebugginggo binaryinjectionheader elf64v execexecutable fileadvanced micronotestrtabgmbhgandi sasgroup indiaprivate limitedqnapcrypthacktoolchromeyandexstripchatamazonawsmal_elf_systembcapple iosiosappletelhashdata uploadcursorse dataextractionn httpsdatafailedcve cve20246387log idgmtnpathsecureselfsamesitenoneencryptd8n timestamptimestamporganizationfalsecertificatesearchemailstwittertwitter spywaretwitter vtflooderxunknown aaaapresent junip addressbelize unknownunknown nsgrok xcursor agentsaiurl urlurl hostnamshostn urlurl databelizea domainsmovedalone emailgmt serverurl analysisacceptnamecheapnamecheap incnamesiloexpimurl httpsdynamicloaderhostff d5yara ruleee fcgeneric httpexe uploadf0 ffeb e1writevfloodermalwareupload inboundav detectionsids detectionsalertsanalysis datecheckin generichttp exeupload inboundoutbound yaranrv2xupxoepplacegoogleadversariesadversarial attackstechniquescreatemodify systemprocess t1064t1543 systemdtechnir createfull reportsv tcphelpja3 digestshashes oet httpget httppost httpdns resolutionscamsadult contentff bbff fff7 b9c1 e8copymarkusaugusttitlegamehackalberta.casongculturelizardsquad
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Trojan.Systembc/yxgdgz CVE-2023-22518 CVE-2024-6387 CVE-2025-20393 Win.Malware.Vtflooder-6722904-1 Trojan:Win32/Vflooder QNAPCrypt Win.Malware.Gamehack-6822792-0
Indicators of Compromise (164 / 4682 total)
All FileHash-SHA256 FileHash-MD5 FileHash-SHA1 IPv4 URL domain hostname CVE email SSLCertFingerprint
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 081b606b78c8fa505138503bfa2a87da MD5 of 9073a50af077cf84d00e138c413005abf5b510ccd667387d1a43dffbea5d4a94 2026-06-03
FileHash-MD5 0a1b23f02d2d108727753d003e493a58 MD5 of b6c18b7d8f58829fbeb78542cc6b08a338910746d551bf59e8e8f6f671db1ae7 2026-06-03
FileHash-MD5 0fe1995993e13726cdc657de5dbb981e MD5 of b52c3f872e12ecb9680952b522b90e989a77a3207464a463fa51c1f9662c8aad 2026-06-03
FileHash-MD5 12e5940e0cbeeaafaade71512277d13c MD5 of 39e0f8e90c26ef9be1dc2db08897de719b606eead5cd5cea73ea056222a51ae0 2026-06-03
FileHash-MD5 12ff0ee70a2a2759129ce7fc5e3f0d84 MD5 of 562823e530cf9da3b54ea545d351bdaeb21c0c69b931b2592c5b73ee46d7c11b 2026-06-03
FileHash-MD5 136062f81dd81225943e74e0dda2855b MD5 of 939ffad3bc96e2f06ccae67b3e8bbff7c1f5cafd5a9a347eaddaa22ad45d3556 2026-06-03
FileHash-MD5 15e8abfeb85d452bee106a9a05e100a8 MD5 of 0ff1166209b2cbc9145d2d2bb0bb14854a2307a95cf44bc34122a94f0037edf9 2026-06-03
FileHash-MD5 1a2b2f27efbea288abcb134a01ae3fe4 MD5 of 70c57bd791f7868b33ed7ed735617b0fc3945b072f093de51a9ab698d2f062e9 2026-06-03
FileHash-MD5 1a41821283a61b0a1b799f925a6e656a MD5 of bf063b347ec5e92ecaf5f81b4100675328431c2d004885be765724547dfea24f 2026-06-03
FileHash-MD5 1c5322641e4f46c0bf4fb9430af41526 MD5 of 1740dabab32156f7a3cfee105c6220718d0b84e25589dbf196bc11875efe2a19 2026-06-03
FileHash-MD5 1f2815f585c61a7dad2eed4f322aa1b4 MD5 of 8852987d9ebf75403800309a90be66eabaa8483eb373f62ec53a43442f81aea3 2026-06-03
FileHash-MD5 21eb46e7b80b33345f3745e8e88c71a8 MD5 of d33ace0dc072cda7638641010aa575d6142be7f4b60c201e39c7a5f2f84aaa28 2026-06-03
FileHash-MD5 259af8b0d0bc540384a06bb730cee9cd MD5 of 756f0b598741a6fdff640a158b6b490472e546d411da2850836b9a8ca76afdc1 2026-06-03
FileHash-MD5 289940ccc0daeb5be1132ee5626c4f15 MD5 of ee9bdeab8281ff24b61cefccd36454f3277522699d9001ec2146f3616d416a62 2026-06-03
FileHash-MD5 295cd6b18eb48f3b812e107e20d3668f MD5 of 158be42cc9091c071f19d8361e4526c7589d98dd34c7fec5a5c1d463c153c761 2026-06-03
FileHash-MD5 2d2783c4d8ac063c952a710efd719812 MD5 of 6face367baf3c54c9b51cd1977ec7f74d6441185f3c09ecaff4ac1f59a1441b0 2026-06-03
FileHash-MD5 342158503af82b7691167aa14e6d0334 MD5 of d4a18004220060249fd975b03ca3b001daf70a1a7e5e7cf7d7da5967611b201e 2026-06-03
FileHash-MD5 35338ff90f81c07e7ecf55ce512c1f05 — 2026-06-03
FileHash-MD5 3571596792fe4f1ddfbcbf7699cb858a MD5 of ffa570ef0e5660d60eca950b6a2d0510e9a0de2625ea1b5bf09cecf7e915e44c 2026-06-03
FileHash-MD5 36e2706dbb760c93a5cadd600d39ca12 MD5 of ce3a2d3e56b74a17a3ff2d6b9b6d2ead54972268e6f1419e9522329790cba319 2026-06-03
FileHash-MD5 39bff5a128a810b36683ce9f8acfe2fd MD5 of ae9d9d47620a716f614bfe5c1a970a19a32ce1aa1e881437343a46e5f176ec37 2026-06-03
FileHash-MD5 3a092d0207edf82e057814aa62a4e772 MD5 of 4c5e822d2065e53bffcb8eaf7b060f1a169eeb3aa4d992c1c386f6f38b0949e8 2026-06-03
FileHash-MD5 3bff4470cc54881c308d9e47d04923c5 MD5 of 713f71de5bc4379ea96e4a25b3976dedad7ff4a415a8bebeddbb49c2dba74494 2026-06-03
FileHash-MD5 44c48d08b759d707be94c5408fc457d2 MD5 of 72ff2295d01f268d8e437a4037dbf020fa0c9628784d64287cf6b5e8256f0702 2026-06-03
FileHash-MD5 4584cb1637978aea42567af73722be2b MD5 of b57ee075a4147f0b58123ca192c005b53e71fb41234d83589ca971d32653a227 2026-06-03
FileHash-MD5 46f41710c335f36f2c0b2d63cd28c9cc MD5 of 4ebe73b1fb4abf6c181a460bdbe284ebb63977489b1dc220aec7215afbdba34b 2026-06-03
FileHash-MD5 4cc99158c0ccbe01be25340f2b1f3df1 MD5 of d19b91d887cdc22dcaebd06487e01e95a42e89407c570ef39a77db53e819d6ba 2026-06-03
FileHash-MD5 4cf060f8c70e97d9e15b4d0e3a160f71 MD5 of b7de51c847ad6437a3f3723412033ebe18dc54f9713d92b1ac507ac468563b34 2026-06-03
FileHash-MD5 4f4c67a6109f1bc085e7ea4f84e44945 MD5 of c789e69f90ca7ed268f081e79d08f64e0dce3de43f8149ccd4cea218fc399da3 2026-06-03
FileHash-MD5 518fb1e74b95546d56a1a7b27f73b3a1 — 2026-06-03
FileHash-MD5 5697f43e2ecc804638c0cca486684801 MD5 of 3883fbc5cdc957d44082156cd8a9dc4c7f5cd6f0696b68d5dc0f257958b39b60 2026-06-03
FileHash-MD5 632db418dba6fa2a217719247541e0e4 MD5 of 06b73aa81b461953879ce7ff89b637a26c53c0f25ebe8d7c285068f4bb4dc75b 2026-06-03
FileHash-MD5 63d8aea4b5b7c761ee4d1aaef060d2b9 MD5 of 592143f6e36a2dba98759804195a9268e30ed4676bd19a72aaec0c47b4bc263f 2026-06-03
FileHash-MD5 674897c901ee2462ebbecb03cbcfe60d MD5 of 9bbdec53cddc6dd93b2a37c6e2ac0d86e929a0502e6d099b8f84f2e6e10d0ce2 2026-06-03
FileHash-MD5 676534e06dea79878ba781689fe601c2 MD5 of 54a119875a02519b14fcbb4de4bc9f115d7ff083c7d5ceec5576cdeb2a7f1a5f 2026-06-03
FileHash-MD5 678dd369cac0f83b1d1df8cdbe9dff49 MD5 of 95d963828b1cf267e3cbcc65cc6e1e0bcd0a15d2cd0896c69e1951fdd60c7653 2026-06-03
FileHash-MD5 6d13d7dc12bfb334e4d075139e58efea MD5 of 896a8b77188d451246a066db89b1a496fc44ee7c2aee52dc3382c6e7a8c5043a 2026-06-03
FileHash-MD5 70cd1ec2694fddab59225fadd9ddbc23 MD5 of e8bb0a2d4e0beb7281a07577df0ec71a1c44b443e34a9b29f81df9893a51c358 2026-06-03
FileHash-MD5 72e89c7c08e0c85600e3729de833de33 MD5 of ed5eb58e89e3ea3788dc4c4cec8126002d690d9167db9773f3ce30b7e7b3224a 2026-06-03
FileHash-MD5 7c4cbfdbaf718995f72a76eedc33ac60 — 2026-06-03
FileHash-MD5 81594ed01ebb467de3523f8c782a6819 MD5 of bec40eaad3c3fdf65457bc7f09082576d2331fae0b9a3173e933f85487fc5e95 2026-06-03
FileHash-MD5 81d72a573f92d36786d491317908f726 MD5 of c9bd0fd298767bce7e1a375200a24983e54e7ef701a5592afc1175dbe310778c 2026-06-03
FileHash-MD5 82a988bbda9829e08121ccf4fa15804b MD5 of d2e8f869d48e079733c7c67bba3ce44eac3751002efaf6d9e942f4f1465ef250 2026-06-03
FileHash-MD5 8a69129d56a9b53c7445e0f485535dd6 MD5 of 58e39fe27077e1cbbae9421dd0f01d43f578d63e03f075c5890bb3931c1c5950 2026-06-03
FileHash-MD5 8ab6df61cb1352f68a9b55ea54d86447 MD5 of 90a00689550d20fdba4d9e1e326356e8cdd02ac9862bad2044503d34b8469329 2026-06-03
FileHash-MD5 93eee43453592145c6c18e670e83dc26 MD5 of 2bacdd6900d56ec81517a30ed64e90bb5ead914caf033233dc08d123904436ff 2026-06-03
FileHash-MD5 9517c897b20dff61952f0256a17bcdbd MD5 of 51de10a58e4a24a6a1816160c402878a37c1ff7c7e3d00b8e055bdaf8ef0700d 2026-06-03
FileHash-MD5 97c97cac862016904d26cea3e82f46cb MD5 of 497db4167ee00ac22b72d65f87a5b831c3e23418345eddd3ae3892e074bd7b5c 2026-06-03
FileHash-MD5 9af2ab512b943031de973f1bac790e9d MD5 of 511ecc0d9c777d755b2eff31a851f81b3dddfd8ac6d541ae6e3de21b8425ed7b 2026-06-03
FileHash-MD5 9f3d960a3d01b520abed533929396f09 MD5 of de8091d685686f38198701805caae5de694fe61a46bcaa6d373f9f6c2da05eaa 2026-06-03
FileHash-MD5 a0fcc7f593d44a1b6e924a79a4eba747 MD5 of b44ed1810bb2de79b01d35b906a1b8f0812e4198c9031c67fc0602c232174117 2026-06-03
FileHash-MD5 a4b58fc19730f96157e479ff28debe0b MD5 of 17c77eaa60ddccdac3ec902ef3036c6a62d4359e4fddd8cee109051b5e0dbcf8 2026-06-03
FileHash-MD5 a5230512ccb33ce1b869f50ff76a54bb MD5 of 8e9f2e13205347290aa6fe7731ca8d6e864f6a9a0a4df96950413f9125a4eba3 2026-06-03
FileHash-MD5 a599cc881c17c3a1669e40260a1f97ae — 2026-06-03
FileHash-MD5 a8e1d5a7ec574d537a5a4f3cc0ecf348 MD5 of fbcc60fd6c83048d9238b1819e22c6f1c13e02ae8b737328054236f8e1f05cf4 2026-06-03
FileHash-MD5 b9cb2063d1fb8067f9455361d2cdec04 MD5 of c0dfbaa43956cd8306b7982700485fffeebe1e0552eab6f01d2f23d3599861ec 2026-06-03
FileHash-MD5 bdac7943ff2869fc0476c22b672a4235 MD5 of 7353a2281f71074f01e8c42917e1e93bc591062845eae1ea21ee1670e5895180 2026-06-03
FileHash-MD5 ce9b6b9cdd6ae87ea4880d7d2845251d MD5 of 78252907efcfe677593d47a1db69c8fa284e39a39ce1bec80da5e218644cffc2 2026-06-03
FileHash-MD5 cfc0e4ea6ff097126c2b0ae3d0da33c8 MD5 of 25c1b5872013cebfff4c96110568650442083dab7f68490f735bad155b148b11 2026-06-03
FileHash-MD5 cff9688e2cf52dd7f92cfe5c59474271 MD5 of 803c1ea859222a6e0753c2c4f41f033e69f135fa53e9e1c9694c5a644a4156b7 2026-06-03
FileHash-MD5 d01dfe354325759786c41c417ace7127 MD5 of 3cfa3df5349173376e67146eeb12718252b57faa8e9138949759f6b1fe21fa3c 2026-06-03
FileHash-MD5 d38f152a0cf4a145b16178f5c8d8a72b MD5 of fe6dafc530eee9c8263e5d18faad317713637351435c3f0db5f95e8d908803be 2026-06-03
FileHash-MD5 d70bdfdfed06fb916f60ce82d41c36ca MD5 of fca41ae47819995676f2552a1d32adae2995b354f239fead2f6b9162df063ae8 2026-06-03
FileHash-MD5 d7676146485fe14727dd7935eb28bf63 MD5 of 6435d2e9a1e2db385bf23f0503f7643f79effc65a17700930add5049fba2488c 2026-06-03
FileHash-MD5 d7858edd404a4ac7bb94d0a6349a208b MD5 of a272cd74c8a4dd14457843aa6bffb55e8f7431e13ad3ee2e397c729646903e21 2026-06-03
FileHash-MD5 da12cbaa96da9f7d75e2bf4257af17cb MD5 of d80c4a7000f0187e955f19c062075a98614409e783f8e0b2ff56057e41840ae2 2026-06-03
FileHash-MD5 da5a9ec2eca79c7d830e90764edc7c4b MD5 of 972494202065544ed00bb888dfadd5fae772660d776617a9262376eada0b0c2d 2026-06-03
FileHash-MD5 dd89280a8cc8b3b148e6c7477e6ea2d3 MD5 of 25a57a6160e02e3b546e9afa665a5d6dfa03f5f18acdd749d4de36037f2c7ba4 2026-06-03
FileHash-MD5 dfdf88100ef43acb51e395015e4550bc MD5 of d0605a147cc5fd7b3c85526b13bbd1a295b47eae6a396adb984497eb07fec690 2026-06-03
FileHash-MD5 e047844604bbf978bb5531176541c89f MD5 of f0215ce56d740b899d461e30ce8388a6b7dd19eada3a656e9834a832b8dd15e1 2026-06-03
FileHash-MD5 e451d0cca1bfa4a74aea7638bffaca5f MD5 of de0198eab7e9988edddfcf9d7e11488cb85979a2f232e3196c067975aa3235f5 2026-06-03
FileHash-MD5 e54d83108712619958c432377c933ba7 MD5 of ec1f13a3f52efd4ecde2ce28280d925512e744997e9de2f4715dd48764a92261 2026-06-03
FileHash-MD5 e79cfa974eaafdbd09163a1c9d19781e MD5 of 7467f6c4bf63a78c36eb45647f0cf9d5e9ac7e36620bfa934f39cf6123905d90 2026-06-03
FileHash-MD5 e8063b4ba7a38eb62fd16609ad8560f5 MD5 of b4c9d052e2e6afebc3b6e64d849064c86dc73162c826556afac271e7897c6fe2 2026-06-03
FileHash-MD5 ed4b5cc3b4c6d0ec721973fda9cfac90 MD5 of 6c2403f35e81affcf226a2ad4d31f00537de8c5aec74ec6c935a65a3e5736b55 2026-06-03
FileHash-MD5 edafdaf1c6582370698810907dd293da — 2026-06-03
FileHash-MD5 ef8beafb487bd808a23f3f819469f4b4 MD5 of c80b0914d1bcc8fd797c1ea6e722b9702996e6bb28449371c5644ac7a65682d5 2026-06-03
FileHash-MD5 f17cab9ffb705438e2fc693059a30463 MD5 of 2dc0ad73b18d3aa88f128ec8fde324efd0c7dac122ae825a5b10a5ad1231aa3f 2026-06-03
FileHash-MD5 f365f3f50bde24c918a135b5466c296f — 2026-06-03
FileHash-MD5 f8e1702373f8fcc277b2b8f9c8053252 MD5 of 398a6afe929665fafd5e00c6093b162df4a711d75560bd5495cb3e9abdd3a548 2026-06-03
FileHash-MD5 fa359b53f10f3d5458f4ab746e6ca90c MD5 of 5c2f019c4bd8bad4ced11f4796e6ce7e02d76b58f2027920ec97df70b5f06584 2026-06-03
FileHash-MD5 8d5df32641af8841b6151d65e4b855a9 — 2026-06-03
FileHash-MD5 a9d39daa0da22feba211990a89974491 — 2026-06-03
FileHash-MD5 fc3ff98e8c6a0d3087d515c0473f8677 — 2026-06-03
FileHash-MD5 77ac44bddf4050b946718bc38ad0cf3e — 2026-06-03
FileHash-MD5 160db77a57775cab0e93b87ed94328a4 MD5 of 17798922a0ad6983ddf35ba1de87768526c375c384d59def37efe768bd4d6d9c 2026-06-03
FileHash-MD5 1c7cc6364975c42792a6fb1787d84265 MD5 of b4ed862b1805cf6b6bfe2360f32a364fdb3bcf899734ddbc98844d24edfb4b08 2026-06-03
FileHash-MD5 3b869d63bfb8fe70b5562b8647f184ed MD5 of 9f5aab27b5b8f6862a16af60d3ae4bafdd0c26eab24eefdbb76cfe826dd98f6b 2026-06-03
FileHash-MD5 71ae0f030e857fee4cf52dba7ae2b88e MD5 of eb9708ac7dcd204e5981484bd46639d64c2c1c56418e342a9f4f40bf2b25b791 2026-06-03
FileHash-MD5 85bba81e4e7d27be925c797685d98579 MD5 of 8239aa3005f188d938393671ebddc4b339af6936f3b89cd83621073bb826a1e7 2026-06-03
FileHash-MD5 877bda4cf6244f5bf68f1b82496e81fa MD5 of 7acd9d698d7a9dfb0902683be1ba865bc1768d2d79d1e0a557ca35d7ed74357f 2026-06-03
FileHash-MD5 9ad857d944a5ee7bc7e4212d23ad8093 MD5 of 408b35eb1c0b45e6a784cea47d97aed22b7c693281b579fbce0913881b029e7b 2026-06-03
FileHash-MD5 a91148ea391bd41fe9ab028053240736 MD5 of ef87aba2ed7e2c286f2afca8fd9148e3d3089d2cef4d6bdb3acaef46cb9acc36 2026-06-03
FileHash-MD5 0116e8f667534695e3879e2274b75cbe MD5 of f29493b83b186595c68be3a9a4c11067475da43164789ab579ef7a4591cbb69a 2026-06-03
FileHash-MD5 07cfeb5d7c8a82727702bebee564ccb5 MD5 of da2c2a30aea9d2346b4e75ba4acc4a086f64b481b368dc5c0d004a2618f77d2d 2026-06-03
FileHash-MD5 0b4dfc15fd7adaafacc3549918a63e55 MD5 of b520bc8902d0adf343b26953ca9bd5a8ec3d87c4d2772eb62910bfa8b4283ba6 2026-06-03
FileHash-MD5 0fbfe936a0907594cc717da23c89de10 MD5 of f5802b32dda6409f20ac152e4a9b282ed1d0aa61954cd4b369a609b342b3e679 2026-06-03
FileHash-MD5 12bfefe8b2fc3f9ca482e2426afab7a3 MD5 of cff907900c15a888e90184ca1caa879d761a46d68e70a63aff4c7dd74f5a0818 2026-06-03
FileHash-MD5 18b96b3d0c805ec7b00379dace58a4a9 MD5 of c954d8ffb0e26e291d27d4b237370e25b327e8303fbe79666502c2f58235d0e9 2026-06-03
FileHash-MD5 1d0ef3a8352a1bdac4d4ab413773e961 MD5 of a5763c035b8895f80c62810e860244e919248e63f870c0f43c06bd07e4af2deb 2026-06-03
FileHash-MD5 1d38a5b7e7972750190a694f5534b790 MD5 of 295fefcc89a39444e4beb612dee0fcdb161d39c6cb1135603b1ef33ac7ce6714 2026-06-03
FileHash-MD5 267c46fb425e7e33bc4ca676aaa73968 MD5 of 93c2e58a1c4980d5ea34afcd17b7e896dabbc60303bfb0e9b334349b03047b91 2026-06-03
FileHash-MD5 2a055301018e98151a048bbb7066ef51 MD5 of a713d071afe759c4376103e8019f4dbcd2172a8ed2a50a3e70bf38f9ab14a5e0 2026-06-03
FileHash-MD5 2cd099fa089e90f7f8fb2592c1b09663 MD5 of 0322566bed6f332659446cf64a6ca2e9bbb431ec057b69817bb88d35e857bcc7 2026-06-03
FileHash-MD5 31ea4515249c27d3bf3a6ffefb1c624e MD5 of 358164c58ef9311fd130c976998dbdfcc6e586e14497b5a4ed2a96fc82cd8f4b 2026-06-03
FileHash-MD5 33060841a54e452049eba7b48d364a72 MD5 of 36812858a61a87afecd94d911ce888062ed5726da1e6ce113fd8ad84ad131f59 2026-06-03
FileHash-MD5 3346bb546e2a1e6ee0b53324f7392c23 MD5 of 04419d27b782bd3695f0b5958a5e82548072f5605b545de419d32e561aeeabd6 2026-06-03
FileHash-MD5 39f3dd0103e029e825891343b89cfc72 MD5 of 24aa2eec39e66fcfa025f7e0c024db2869dac241f4d9a572a86f1b062ad295af 2026-06-03
FileHash-MD5 3f257129b4edc58756f2a2b6b6f04412 MD5 of 17ff0ba0f7c0289af2e748079221af0306e4e5142232bae0393266dd29bb7a28 2026-06-03
FileHash-MD5 47ae2e01467bd80dbf50a603151ddb6a MD5 of b8f676bc5f54ad5fc4b9c20d3b1c2d28e82f56e5498fa067b6c3c855edb7b88f 2026-06-03
FileHash-MD5 48bfa16d93bc9d8c3a2a8206889f4296 MD5 of 648cfd64146b8fbdd8409fbd95f38d44f6fca3e4b1a6164b555e1dd1baf75d3f 2026-06-03
FileHash-MD5 52073a8770ab917ec7209ab3aefcf0c5 MD5 of b171f91990c6ec878fd875d49c09b9c59724f8223013926c737980069759251e 2026-06-03
FileHash-MD5 5e4de833e0de850e844ed6c9c64ed7d3 MD5 of 86f676c963926381149487db0802212e3563e45aa592732bc5f5a59ec545c814 2026-06-03
FileHash-MD5 5f726349e95d40ef6df7b1eb8eeeb97f MD5 of a80c1217227e00965f20135030cfdfcfe72a6f03f16788f3d4bb181164e3fd76 2026-06-03
FileHash-MD5 66b3c181a68fead7c9fbda77584015b4 MD5 of 66653f48848d31f4ae0a9099813b176dac9f1e88829d06387a38a18b7986bc34 2026-06-03
FileHash-MD5 6c6e8b7e0a79dbcc68194e285ae0c444 MD5 of c7ef3b3e8757bbd4316fbe04c7edbfbcc4700980d3ef766b78427d90ab705b78 2026-06-03
FileHash-MD5 77d380468ede2d409829e0ba33189536 MD5 of 20bd5884c8212c43f91fa30156a836e3ccc21dd01933dbdefc560abb2b581372 2026-06-03
FileHash-MD5 7a61aa05546c30ad1f4fb85966ad7098 MD5 of 7476476bdc93726f46f75f5bdd5ce6c619d73f7ee82b7d93ad835c993ff14661 2026-06-03
FileHash-MD5 80a1131db9ab82e0ddd37a1043d03246 MD5 of 9599b4c7106a1b94f28fdd57e1e329b951dd1b75d51c2365e4c22a3634b81749 2026-06-03
FileHash-MD5 8220665ec5605fbdc7b8e21afe42f52e MD5 of 0e6ff63d0684b7323e039273b5024439ccdf5c60bc7056740e6ff0875b6b34c0 2026-06-03
FileHash-MD5 90054dc090794b28294b048cba87be44 MD5 of b2983ce1a9233b6ad528f916fb8a1ded85765e1dcbb8d4c5c435fc869442ccd8 2026-06-03
FileHash-MD5 952a58fd7cfe73b1773734eb98ef14c0 MD5 of d8bf0f3712dc6825c3667ff8bee9f8889059449342bb51d016db87398a0c2eff 2026-06-03
FileHash-MD5 c013b5abb294cc0accd7a35b8aeb4f24 MD5 of 8b54017eb5429710afffb9b3b753217f28ac435924e50bd3c4844dc8710674d7 2026-06-03
FileHash-MD5 c459418179a1916e0ac2e00cfd1503dd MD5 of a52f8838faa08a12a6a14689ee308c37e1bb0567dafe1fbb4bdca0b608d04447 2026-06-03
FileHash-MD5 ca80df00c8370dd82a8233aacbb58bac MD5 of a5f9c57d25865b8b94eac1b7f93e33e3eff047dbba78d22ae793debb37d44368 2026-06-03
FileHash-MD5 caf275b49d1787aff8c60acddd72484d MD5 of fe93947d8bd8a5a36d69a62ece6fcac47fe5e6c3436c48c58f5a5c06f34c9ff1 2026-06-03
FileHash-MD5 cbab1e9b3bbaa96ff11ae9de55a254ec MD5 of f22a380a5ff1894c58ec4c244b0850b7398325669ff4778f4927e1e9efc05a0d 2026-06-03
FileHash-MD5 d3fcf8faeb822eab097bb6839a8e3912 MD5 of afb4ac55255a2de34037a31d1ac9606be3dd512ec608833734a5326a40ba0c44 2026-06-03
FileHash-MD5 db282d5c61088018d20e23b8bd129528 MD5 of 57e8fbd55fac036601847c33138e7ea5f5da1450fcbbc031d896b9a32a5bb71d 2026-06-03
FileHash-MD5 dcf190f92c88de66e4008a018966ded8 MD5 of 5bb2bc9dbf41b0e6b9bd332670d882d1316c227fec8599cbabbd8483575fe8be 2026-06-03
FileHash-MD5 e2f982c58c0a83a966addae4ed43aabe MD5 of 45013f2073d7d6c22c5b05d2052f040513a1ef4cd757ad8fb9a947367c6d5b71 2026-06-03
FileHash-MD5 ea4ced206906e2f91107a02e70d3d7ae MD5 of e38d2610ad5aa9b558e5feba79bbd388f85af0150c6afc14460e36ba4246ae90 2026-06-03
FileHash-MD5 f72196bc1415d5136071e9bfcd9d8ef1 MD5 of 431d65fc448cf4380ff5b3dd00d1435548334755573cffa4d482bb9fff063874 2026-06-03
FileHash-MD5 f9c18e2b107713e8fe05b19eb05555a4 MD5 of dbc86d08e44ce0750899a4b8424f2100e07132d63d142825da913484e6939951 2026-06-03
FileHash-MD5 fe38615ea732555d5d6d178aac74347e MD5 of 37dd3641cd983dfd7f6dc007ee4379be1120284db0d6330ae68e7161d7c5b719 2026-06-03
FileHash-MD5 fed7222428c31bce093322c6aa7043c5 MD5 of e4edd331f66576f0544fb3f0f52bae9d0f961eef5b953883ec24359fcceddb60 2026-06-03
FileHash-MD5 fefe5bb2d64ea3a4dfa2404a553fdea2 MD5 of e5e813446e7b712c2eea69f60efc786d584c841902acb3a0199da904dbb64c13 2026-06-03
FileHash-MD5 0776b5ddca83a4b9ca598f5d771f9e46 — 2026-06-03
FileHash-MD5 4abf7e989797706c231b1b16e8ff3de0 MD5 of 53fb79f2674e8bf97352a51314f753c6a6e3c4c2822a5b7bd5e10fea8bd0e5e9 2026-06-03
FileHash-MD5 8b441c8af7390a9270bc3386767aa2e2 MD5 of 1213baff29fcdd94d63835d6cb97881d928be00f28d0631c68c5e7c8a38b3898 2026-06-03
FileHash-MD5 b8dc9405bd3c7e77dcdad8a60c2c70a2 MD5 of fb73b4119f2c611751dc491a186eb66a6f10ef4210fe54c4e7b1cd440d1483ae 2026-06-03
FileHash-MD5 db59ed6c6e6dbd6cdafcd30b36a50603 MD5 of 306856a5317bead533b3ef702f1a6ba3eb5a7c239c5dac12eeb7b90cf84b7be6 2026-06-03
FileHash-MD5 e7f130c981a05a978a47f5f8082ce87e MD5 of 728badaa02d9dad4b432d1238a75b566e2717c300490706e6748c4cb102e8f00 2026-06-03
FileHash-MD5 fd75db9ac6725fc6a401986234951d51 MD5 of 877c96aef33dffccba8590189dca8b7bd4113c4c1c0513faea7cb0880ed0d2c9 2026-06-03
FileHash-MD5 0786cc1bb5f705e2232f670dbfd5c705 MD5 of 7ed14beca7021c65f107d4c045e8e4bfb2eb1d9ae523d0c1ef135c3795a11f47 2026-06-03
FileHash-MD5 ad3c7d9858373da562252eb8b6567691 MD5 of a86b81ab2c50de0f30a57da9d3f40d105e773d4d77683ae7e1058a112b9115c7 2026-06-03
FileHash-MD5 f77439887acab3347520111a84834389 MD5 of a1948e346dc43c0f67399cbdf2051988577b64819d83befbef728c1f8ee7e9ba 2026-06-03
FileHash-MD5 02451814b89e7ad7d828408124e00c0c MD5 of 8572141f5b6c7217e09d48788f785df8d1357c134cd511cdb1b7449d6648908e 2026-06-03
FileHash-MD5 4eedd290dc4bd1184b77f964d1c4ec6c MD5 of 2ed3f7c3c3cc9a615e6e971923effd392140395b26fd3769ce5b2cc60b5dec1f 2026-06-03
FileHash-MD5 50e831c5c08d4b4cd5cce5f912b8506d MD5 of 3c959828057b80bf5201133e676e65d8abd4ee973ea72a90c47db66b893e7da3 2026-06-03
FileHash-MD5 5ba1fd6c92b8732f07b7e18ef8958ff5 — 2026-06-03
FileHash-MD5 7f667a71d3eb6978209a51149d83da20 MD5 of be36a4562fb2ee05dbb3d32323adf445084ed656 2026-06-03
FileHash-MD5 ab24c7a7c0da9075d99ab2f5969b134e MD5 of 6a7507e3a4252c0fccd132377638b5ea047e8a67e756e0e75241d6c1e733ceb6 2026-06-03
FileHash-MD5 aee5531fef5db00acb1f13f57a64c7f5 MD5 of 87f9b66f184c347693da74ad3eb89a8b922c97fda660e22e4039772a24f4329e 2026-06-03
FileHash-MD5 e159ecefac1d5b8e1591310ff7952771 MD5 of 345c7bb539434c162bbcca51707b773154aee5658f5a64c59ed89e9a3d3d025a 2026-06-03
FileHash-MD5 201cdf1b7ec78db56e75949506ff8b4a — 2026-06-03
FileHash-MD5 96ad45edd36c5b2ae343caf1f13563a6 — 2026-06-03
FileHash-MD5 b8d11f51c9a0a1b0cc6e88a9166db2ac — 2026-06-03
FileHash-MD5 f436b9416f37d134cadd04886327d3e8 — 2026-06-03
FileHash-MD5 f94b01eae8b7266424de1f26839f955b — 2026-06-03
FileHash-MD5 14e4b75dfdca2d21134ec6192c0440f1 — 2026-06-03
FileHash-MD5 be5eae9bd85769bce02d6e52a4927bcd — 2026-06-03
FileHash-MD5 cbcd1d81f242de31fd683d5acbc70dca — 2026-06-03
FileHash-MD5 cd30d527ce49c5800527616b5483bec9 — 2026-06-03
References (49)
↗ FileHash-SHA256 756f0b598741a6fdff640a158b6b490472e546d411da2850836b9a8ca76afdc1 ↗ TelfHash t135324a7149bc74b5b6a6d910b3a3b4b8a6772d6566f434f51023ad84ffc1e801ce283b ↗ Names: testpaging • upof6w.exe • 2026-04-07_259af8b0d0bc540384a06bb730cee9cd_qnapcrypt ↗ Yara Detections: is__elf IP’s ↗ IP’s Contacted: 104.17.118.12 57.144.248.1 176.114.120.24 80.12.24.14 95.163.61.73 142.251.98.113 ↗ IP’s Contacted: 212.227.17.162 77.88.44.55 142.93.142.17 104.18.14.206 ↗ Domains Contacted: checkip.amazonaws.com vk.com arena.ai www.yandex.ru stripchat.com ↗ ELF - ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, ↗ Go BuildID=qBC61D7N3q3H7j2Pq55o/WsPsx2ArOJ0T24axAUMZ/K6isHEI8QMyAMkIM3HH8/QQevOAoeyrO7eZGdBARa, ↗ BuildID[sha1]=068f07f6460b85817e4be47c18c10d1a1fbef817, stripped ↗ motherlesslive.com ↗ blackbox21.shop ↗ passwordreset.gscs.ca • https://passwordreset.gscs.ca/ ↗ alberta.ca impacts an OTX user ↗ https://stripchat.org/ • 27bsmextreme.tech • 35bsmextreme.tech • 46bsmextreme.tech • ↗ FileHash-SHA256 9da8632065cc24646086ff5fb769c452f777aa6c2470a02a16d209baabd1e4b5 ↗ storage/analyses/1000549/network 9da8632065cc24646086f f5 fb769c45" ↗ ? Con*-cted jp-١٠١٠٠٠.--- لحما ↗ https://arena.ai/apple-touch-icon-dark.png ↗ https://www.forbes.com/consent/ketch/?toURL=https://www.forbes.com/2009/07/28/hackers-iphone-apple-technology-security-hackers.html ↗ nr-data.net • push.apple.com ↗ https://twitter.com/PORNO_SEXYBABES • twitter.com ↗ Vtflooder-9783271-0 -> 7476476bdc93726f46f75f5bdd5ce6c619d73f7ee82b7d93ad835c993ff14661 ↗ Win.Malware.Vtflooder-9783271-0 -> Domains Contacted twitter.com www.virustotal.com ↗ IP’s Contacted 162.159.140.229 34.54.88.138 ↗ IDS Detections: Win32/Vflooder.B Checkin • Generic HTTP EXE Upload Inbound • Generic HTTP EXE Upload Outbound ↗ Yara Detections: SUSP_Imphash_Mar23_2 , UPX , Nrv2x , UPX_OEP_place , , UPXv20MarkusLaszloReiser ↗ Yara Detections: UPX20030XMarkusOberhumerLaszloMolnarJohnReiser ↗ Yara Detections: UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser ↗ Alerts: procmem_yara suricata_alert dynamic_function_loading network_cnc_https_generic reads_self ↗ Alerts: network_cnc_http network_http packer_unknown_pe_section_name injection_rwx dead_connect exec_crash ↗ Sigma: Matches rule Suspicious Outbound SMTP Connections by frack113 ↗ Suspicious DNS Query for IP Lookup Service APls by Brandon George (blog post) Thomas Patzke ↗ Crowdsourced IDS: ET DROP Spamhaus Listed Traffic Inbound group 60 ↗ Matches rule ET INFO External IP Lookup Domain in DNS Lookup (checkip amazonaws .com) ↗ Matches rule ET INFO External IP Check (checkip.amazonaws.com) ↗ ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX) ↗ (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX) ↗ Matches rule SURICATA Applayer Detect protocol only one direction virustotal.com ↗ DESCRIPTION: Detects systembc RAT REFERENCE: https://www.linkedin.com/posts/any-run_systembc-rat-explorewithanyrun-activity-7289971333671645184-Sefp/?utm_source=share&utm_medium=member_ios RULE_AUTHOR: X__Junior ↗ https://www.linkedin.com/posts/any-run_systembc-rat-explorewithanyrun-activity-7289971333671645184-Sefp/?utm_source=share&utm_medium=member_ios RULE_AUTHOR: X__Junior ↗ https://docs.cursor.com/en/cli/reference/slash-commands ↗ https://api.cursor.com/v0/agents/ ↗ https://grok.com/imagine/agent/d5e99582-a7e7-4138-b129-780e171ba9ac ↗ beacons.bcp.gvt.com • http://vtboss.yolox.net/md5.php • finanse.mf.gov.pl ↗ cdn10.mypornvid.fun impacted a targeted individual ↗ https://click.italiansexclub.fun/click/HpdeyDt6 ↗ https://sexfortokens.com/hotmilfbitch ↗ Win.Malware.Gamehack-6822792-0 IDS Detections Riskware/Cheathappens Checkin (songculture attack)