IOC LOOKUP
// SEARCH IP, DOMAIN, HASH, OR URL AGAINST OTX THREAT INTELLIGENCE
Indicator of Compromise Search
Bulk Lookup
✦ IPv4 Address ✦ Domain ✦ MD5/SHA1/SHA256 Hash ✦ URL
INDICATOR
328e097831c74290f102dcf11c41bc4b7b82a37681d8df3690783ea8a9e3bebc
SHA256 ⚠ 6 PULSE HITS
↓ CSV ↓ JSON
30
/100
MEDIUM
CONFIDENCE LEVEL
THREAT CONFIDENCE ANALYSIS
MEDIUM 30/100 confidence
Some evidence of suspicious activity. Further investigation recommended before action.
CLEAN LOW MED HIGH CRIT
0 25 50 75 100
OTX
20/30
6 pulses
VIRUSTOTAL
—/35
N/A
ABUSEIPDB
—/25
IPv4 only
URLHAUS
10/10
LISTED
General Information
Hash328e097831c74290f102dcf11c41bc4b7b82a37681d8df3690783ea8a9e3bebc
File TypeFileHash-SHA256
AlienVault OTX Analysis ↗ View on OTX
6
PULSE HITS
Pulse Hits 6
Indicator Type SHA256
Threat Level
ASSOCIATED PULSES
PULSE NAMEDATE
EbeeApril2026 Pt8 2026-04-30
Post-Quantum Crypto in a Go Trojan: A Garble-Obfuscated ASUS DLL Ships ML-KEM, a Fabricated DigiCert Chain, and Azure + Firebase C2 2026-04-26
Unknown | Apr 11, 2026 2026-04-10
Malicious_File | Apr 11, 2026 2026-04-10
Unknown | Apr 10, 2026 2026-04-09
VirusTotal Analysis ↗ View on VirusTotal
⚠ VirusTotal rate limit reached. Try again shortly.
URLhaus (abuse.ch) ↗ View on URLhaus
⚠ LISTED
URLHAUS
URLs Found 25
First Seen 2026-04-09
Malware NetSupport
File Type dll
ASSOCIATED URLs
URL STATUS / TYPE DATE
https://matrix-vault.systemoraengine.in.net/05f... offline —
https://rule-node.systemoraengine.in.net/05fe31... offline —
https://engine-api.systemoraengine.in.net/05fe3... offline —
https://space-gate.theorivector.in.net/05fe317c... offline —
https://point-hub.theorivector.in.net/05fe317c-... offline —