{ "type": "Domain", "indicator": "abc.ilptour.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/abc.ilptour.com", "alexa": "http://www.alexa.com/siteinfo/abc.ilptour.com", "indicator": "abc.ilptour.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": {}, "pulse_info": { "count": 0, "pulses": [], "references": [], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 1, "pulses": [ { "id": "69f3241b2759ee934874df9f", "name": "Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India", "description": "The Silver Fox threat group conducted phishing campaigns in December 2025 and January 2026, impersonating tax authorities in India and Russia. Malicious emails contained archives with a modified Rust-based RustSL loader that deployed ValleyRAT backdoor. Over 1600 malicious emails targeted organizations across industrial, consulting, retail, and transportation sectors. During investigation, a previously undocumented Python-based backdoor named ABCDoor was discovered, active since late 2024. The attacks utilized multi-stage infection chains involving encrypted payloads, custom ValleyRAT modules, and various persistence mechanisms including Phantom Persistence technique. ABCDoor features remote control capabilities, screen broadcasting using ffmpeg, and file manipulation functions. The group employed sophisticated evasion techniques including geofencing, string encryption, and mimicking legitimate VPN services.", "author_name": "AlienVault", "modified": "2026-05-30T09:04:01.553000", "created": "2026-04-30T09:42:51.123000", "revision": 2, "tlp": "white", "public": 1, "adversary": "Silver Fox", "indicators": [ { "id": 4068785910, "indicator": "obfuscate.io", "type": "domain", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4166983499, "indicator": "3296bd88e0a85ebad4f429878bf8bca16ac43e609133b4781f88a339c37bfe9f", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4172139847, "indicator": "4fc5ec1de89ce3fcdd3e70db4a9c39d1", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4172139849, "indicator": "70ae9ca2a285da9005a8acb32dd31ace", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4172139854, "indicator": "1d28c9073fb89c09cd34ea3592d6654832e45a14", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4172139863, "indicator": "fd4dba4c4493e6fe3045f9e47f63b6f8b256ac32", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4172139927, "indicator": "4518249127a023adb81d232452395e1506a3766eac1664b8a63c3d0e7dcc2dc2", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4172139934, "indicator": "4b4dcbd26f08dca7e3e5721f0f5bdc6274e1edc0556e0749a426ec22ff83ca10", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4172139996, "indicator": "949b0bea5bd7feab58e280dde49310521920b655714c5f1b7d9de8719373dcd7", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4176640019, "indicator": "b0e06925db5416dfc90babf46402cd6f", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4176640034, "indicator": "a00e86ee1c4a1318ae394d3927d01f5aec74f861", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4176640228, "indicator": "f0e4d25b9b707be029e915ecb9fe61132cce89e138de36fef5e1edef551d7c25", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4176640241, "indicator": "http://154.82.81.205/YD20251001143052.zip", "type": "URL", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4183410047, "indicator": "2c5a1dd4cb53287fe0ed14e0b7b7b1b7", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4183410050, "indicator": "3c6aec25ebb2d51e1f16c2eef181c82a", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4183410060, "indicator": "25818cdcfb39eaa22d999d214e6159417cfba72e", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4183410069, "indicator": "bb88f63ba7762b7307251ab0e8bb544ccbaf9b52", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4183410139, "indicator": "5d8c7fffc0992639edbca893366f19d5784af2d77e3cfcbaa445a10c503f935a", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4183410162, "indicator": "795f939f8b9a2d56a3e8a609cab81032d9122a7d56ea852d95cd668f09139a3a", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4186644370, "indicator": "70016ddbcb8543bdb06e0f8c509ee980", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4186644376, "indicator": "8fc911ca37f9f451a213b967f016f1f8", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4186644381, "indicator": "dd0114ffacc6610b5a4a1cb0e79624cc", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4186644384, "indicator": "0e8c2c75d3dd4b670b8d035d5f645c74f5455c02", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4186644386, "indicator": "34d7aa9cf1fceab7f221891f7fbc23157bd9f65b", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4186644392, "indicator": "9a6c59eaa1d467029c8e1fee651b6d09ddde91e4", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4186644470, "indicator": "5be9fc4ad9ae3e791d18427f4592c234dfb612aec39b219e8ec57424f61cbab3", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4186644500, "indicator": "905efac09785631ed57e57a6236b87c04f53b9e0a3bf697df71365814dee6362", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4186644556, "indicator": "dbfa683cd8c600ed0e90f58eb965ca38b1561fa99d12cb7f252e8608da217df2", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4200830131, "indicator": "67c87dafb26de3b2b15b93a4ccd291e95682b9adf4ecb083b7c54286245ebd87", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4216642268, "indicator": "abc.doublemobile.com", "type": "hostname", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4228125472, "indicator": "44299a368000ae1ee9e9e584377b8757", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4228125474, "indicator": "a0d1223ca4327aa5f7674bda8779323f", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4228125485, "indicator": "895aebe2d281e66f87963c01de570286561a0de2", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4228125486, "indicator": "96ea4a649f67272e305b75401a4045efae91c926", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4241100602, "indicator": "1d1f71936db05f67765f442feb95f3fd", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4241100621, "indicator": "d1d78cd1436991adb9c005cc7c6b5b98", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4260940318, "indicator": "guard.rs", "type": "domain", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639148, "indicator": "039e93b98ef5e329f8666a424237ae73", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639149, "indicator": "04194f8ddd0518fd8005f0e87ae96335", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639150, "indicator": "043e457726f1bbb6046cb0c9869dbd7d", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639151, "indicator": "06130dc648621e93acb9efb9fabb9651", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639152, "indicator": "0b9b420e3edd2ade5edc44f60ca745a2", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639153, "indicator": "0c3b60ffc4ea9ccce744bfa03b1a3556", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639154, "indicator": "1020497bef56f4181aefb7a0a9873fb4", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639155, "indicator": "11705121f64fa36f1e9d7e59867b0724", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639156, "indicator": "13669b8f2bd0af53a3fe9ac0490499e5", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639157, "indicator": "1aa72cd19e37570e14d898dff3f2e380", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639158, "indicator": "202a5bcb87c34993318cfa3fa0c7ecb0", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639159, "indicator": "2375193669e243e830ef5794226352e7", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639160, "indicator": "27a3c439308f5c4956d77e23e1aad1a9", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639161, "indicator": "2b92e125184469a0c3740abcaa10350c", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639162, "indicator": "32407207e9e9a0948d167dca96c41d1a", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639163, "indicator": "3279307508f3e5fb3a2420dec645f583", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639164, "indicator": "3417b9cf7acb22fae9e24603d4de1194", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639165, "indicator": "4a5195a38a458cdd2c1b5ab13af3b393", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639166, "indicator": "4d343515f4c87b9a2ffd2f46665d2d57", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639167, "indicator": "4fc8c78516a8c2130286429686e200ed", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639168, "indicator": "5390e8bf7131caaaa98a5dd63e27b2bc", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639169, "indicator": "53b68ca8d7a54c15700cf9500ae4a4e2", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639170, "indicator": "5b998a5bc5ad1c550564294034d4a62c", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639171, "indicator": "5ed84b2099e220d645934e1fd552ae3a", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639172, "indicator": "6495c409b59deb72cfcb2b2da983b3bb", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639173, "indicator": "6611e902945e97a1b27f322a50566d48", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639174, "indicator": "6cf382d3a0eae57b8baaa263e4ed8d00", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639175, "indicator": "79cd56fc9abf294b9ba8751e618ec642", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639176, "indicator": "7f27818e4244310a645984ccc41ea818", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639177, "indicator": "814032eec3bc31643f8faa4234d0e049", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639178, "indicator": "84e54c3602d8240ed905b07217c451cd", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639179, "indicator": "891de2ff486a1824f2db01c1bdf1d2e9", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639180, "indicator": "8ac5bee89436b29f9817e434507fef55", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639181, "indicator": "90257aa1e7c9118055c09d4a978d4bee", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639182, "indicator": "933f1cb8ed2ced5d0dd2877c5ea374e8", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639183, "indicator": "9bf9f635019494c4b70fb0a7c0fb53e4", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639184, "indicator": "a083c546dc66b0f2a5e0e2e68032f62c", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639185, "indicator": "a234850dfdfd7ee128f648f9750dd2c4", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639186, "indicator": "a543b96b0938de798dd4f683dd92a94a", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639187, "indicator": "a75713f0310e74ffd24d91e5731c4d31", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639188, "indicator": "ad39a5790b79178d02ac739099b8e1f4", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639189, "indicator": "b23d302b7f23453c98c11ca7b2e4616e", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639190, "indicator": "b500e0a8c87dffe6f20c6e067b51afbf", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639191, "indicator": "b53e3cc11947e5645dfbb19934b69833", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639192, "indicator": "b5ca812843570dcf8e7f35cacab36d4a", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639193, "indicator": "b6df7c59756ab655ca752b8a1b20cffa", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639194, "indicator": "c50c980d3f4b7ed970f083b0d37a6a6a", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639195, "indicator": "cb3d86e3ec2736ee1c883706fca172f8", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639196, "indicator": "d17caf6f5d6ba3393a3a865d1c43c3d2", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639197, "indicator": "de8f0008b15f2404f721f76fac34456a", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639198, "indicator": "dfc64dd9d8f776ca5440c35fef5d406e", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639199, "indicator": "e5e8ef65b4d265bd5fb77fe165131c2f", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639200, "indicator": "e6362a81991323e198a463a8ce255533", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639201, "indicator": "e66bae6e8621db2a835fa6721c3e5bbe", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639202, "indicator": "eefc28e9f2c0c0592af186be8e3570d2", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639203, "indicator": "f15a67899cfe4decff76d4cd1677c254", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639204, "indicator": "f7037cc9a5659d5a1f68e88582242375", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639205, "indicator": "f8371097121549feb21e3bcc2eeea522", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639206, "indicator": "fa08b243f12e31940b8b4b82d3498804", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639207, "indicator": "fc546acf1735127db05fb5bc354093e0", "type": "FileHash-MD5", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639208, "indicator": "0ac6b8a5f0572b82f6483f2dff2d1535e3da55f0", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639209, "indicator": "0dc9684946142d231f75ed2c9ce1f7ebc38b39f4", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639210, "indicator": "12e41cc25fe8e99a0fca691fb88ed9823e989853", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639211, "indicator": "2c2ebe8f78f1a4143e6a125adb7a4efd2aebc275", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639212, "indicator": "34d792d07092d963375e336869c9f40296858345", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639213, "indicator": "38a03f625cd9de3086a7ea6759c0b46115a0525b", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639214, "indicator": "8c29a2693ddf208455db290abfc76c153da27643", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639215, "indicator": "acbdc1781a5a62789fdd233cde9c6521500f66f2", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639216, "indicator": "ad94d5ee63f405eb6a1a157713aa6999e579c6e6", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639217, "indicator": "ca5c6fc9d9adc8e8edd474f601429764cc52d4b0", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639218, "indicator": "f4d105f9565a8ee98e94d92e5a516e2f7b86e343", "type": "FileHash-SHA1", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639219, "indicator": "0cffb8b8fd11f300b5477ff23ec576f66ab65c021d995fa5495827237e679d93", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639220, "indicator": "0eb664b45200c9b4e954162128d2c13bc693f6ae57650b49a3a9fb9b2e821110", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639221, "indicator": "285c764e84ca830d90e75df06ee5445693f79058142b85b5e054c5c78c0421aa", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639222, "indicator": "56366c635d7b2ae88e8c8e9511f0c12e1cf1173b8be8c8f211b38a26d3a21e1c", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639223, "indicator": "a553833771f3e75ec3132f1295284e0e885e048b288f37ff8546677e5cb42f2f", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639224, "indicator": "c925048d6da2a2cd30ad521c1153f56366ee4bacbe84c8b929c1be7f9f2aa445", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639225, "indicator": "d8f9f8bc811f428dd9605000470c5f496f46145e2d3d8b7e750bca901e55fcdd", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639226, "indicator": "e96091fd784eca3c56ce4a703b22f5e5941464aec32a6f356ad0f99ea4422f04", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639227, "indicator": "fedf8678350dd29713be43f6115a2a8361f011b4b2eaf51e57eb2ffd758caa83", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639228, "indicator": "ffaea868dc1d68211664133e3b69f7025f1406bd4647d77f3aee945d745ad4bc", "type": "FileHash-SHA256", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639234, "indicator": "http://154.82.81.205/YD20251001143052.zip'", "type": "URL", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639235, "indicator": "http://154.82.81.205/YN20250923193706.zip.", "type": "URL", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639236, "indicator": "https://abc.fetish-friends.com/setup/install", "type": "URL", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639237, "indicator": "https://abc.fetish-friends.com/setup/install?channel=dianhua-0903", "type": "URL", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639238, "indicator": "https://abc.fetish-friends.com/setup/install?channel=whatsapp_0826", "type": "URL", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639239, "indicator": "https://abc.fetish-friends.com/setup?channel=jiqi_0819", "type": "URL", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639240, "indicator": "https://abc.fetish-friends.com/uploads/appclient.zip", "type": "URL", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639241, "indicator": "https://mcagov.cc/download.php?type=exe.", "type": "URL", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639242, "indicator": "https://roldco.com/api/download/c51bbd17-ef08-4d6c-ab4c-d7bf49483dd6", "type": "URL", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639243, "indicator": "https://sudsmama.com/api/download/50e24b3a-8662-4d2f-9837-8cc62aa8f697", "type": "URL", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639244, "indicator": "https://sudsmama.com/api/download/c8ea0a2c-42c2-4159-9337-ee774ed5e7cb", "type": "URL", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639245, "indicator": "https://vnc.kcii2.com", "type": "URL", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639246, "indicator": "ipv4.rs", "type": "domain", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639247, "indicator": "mcagov.cc", "type": "domain", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639248, "indicator": "roldco.com", "type": "domain", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639249, "indicator": "steganography.rs", "type": "domain", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639250, "indicator": "sudsmama.com", "type": "domain", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639251, "indicator": "uuid.rs", "type": "domain", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639252, "indicator": "abc.3mkorealtd.com", "type": "hostname", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639253, "indicator": "abc.fetish-friends.com", "type": "hostname", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639254, "indicator": "abc.haijing88.com", "type": "hostname", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639255, "indicator": "abc.ilptour.com", "type": "hostname", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639256, "indicator": "abc.petitechanson.com", "type": "hostname", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639257, "indicator": "abc.sudsmama.com", "type": "hostname", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639258, "indicator": "abc.woopami.com", "type": "hostname", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null }, { "id": 4335639259, "indicator": "vnc.kcii2.com", "type": "hostname", "created": "2026-04-30T09:42:52", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1, "role": null } ], "tags": [ "python backdoor", "silver fox", "winos 4.0", "valleyrat", "ABCDoor" ], "targeted_countries": [ "British Indian Ocean Territory", "India", "Indonesia", "Japan", "Russian Federation", "South Africa" ], "malware_families": [ "ABCDoor", "ValleyRAT", "RustSL", "Winos 4.0" ], "attack_ids": [ "T1053.005", "T1113", "T1056.001", "T1204.002", "T1566.001", "T1115", "T1106", "T1140", "T1219", "T1055", "T1083", "T1497", "T1102", "T1547.001", "T1027", "T1573", "T1132", "T1070.004", "T1071.001" ], "references": [ "https://securelist.com/silver-fox-tax-notification-campaign/119575/" ], "industries": [ "Manufacturing", "Retail", "Transportation" ], "extract_source": [], "more_indicators": false, "indicator_count": 144 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "abc.ilptour.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "abc.ilptour.com", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780165476.8121734 }