IOC LOOKUP
// SEARCH IP, DOMAIN, HASH, OR URL AGAINST OTX THREAT INTELLIGENCE
Indicator of Compromise Search
Bulk Lookup
✦ IPv4 Address ✦ Domain ✦ MD5/SHA1/SHA256 Hash ✦ URL
INDICATOR
d348ea7b49dee36d4f979f729e70612f9426bf3e
SHA1 ⚠ 4 PULSE HITS
↓ CSV ↓ JSON
55
/100
HIGH
CONFIDENCE LEVEL
THREAT CONFIDENCE ANALYSIS
HIGH 55/100 confidence
Strong evidence of malicious activity across multiple sources. Prioritise investigation.
CLEAN LOW MED HIGH CRIT
0 25 50 75 100
OTX
20/30
4 pulses
VIRUSTOTAL
35/35
19/77 detected
ABUSEIPDB
—/25
IPv4 only
URLHAUS
0/10
N/A
General Information
Hashd348ea7b49dee36d4f979f729e70612f9426bf3e
File TypeFileHash-SHA1
AlienVault OTX Analysis ↗ View on OTX
4
PULSE HITS
Pulse Hits 4
Indicator Type SHA1
Threat Level
ASSOCIATED PULSES
PULSE NAMEDATE
APT10 Using Cobalt Strike and Continuing to Target UK 2018-05-21
“Broken Seal” DocuSign-themed Delivery with Fileless Process Hollowing (Zeppelin/Bloat-A) 2026-02-13
Spam “Broken Seal” DocuSign-themed Delivery w/Fileless Process Hollowing (Zeppelin/Bloat-A) by msudosos 2026-03-22
Spam “Broken Seal” DocuSign-themed Delivery w/Fileless Process Hollowing (Zeppelin/Bloat-A) by msudosos 2026-03-22
VirusTotal Analysis ↗ View on VirusTotal
19/77
DETECTIONS
MALICIOUS
Malicious 19
Suspicious 0
Harmless 0
Undetected 41
Reputation 0
File Name cat.bmp
File Type BMP
File Size 241.8 KB
TOP DETECTIONS
VENDORRESULT
ALYac Generic.Trojan.Catcode.Marte.A.651A8684
Arcabit Generic.Trojan.Catcode.Marte.A.651A8684
BitDefender Generic.Trojan.Catcode.Marte.A.651A8684
ESET-NOD32 PowerShell/Rozena.BF
Emsisoft Generic.Trojan.Catcode.Marte.A.651A8684 (B)
FireEye Generic.Trojan.Catcode.Marte.A.651A8684
GData Generic.Trojan.Catcode.Marte.A.651A8684
Google Detected
Ikarus Trojan.PowerShell.Rozena
Lionic Trojan.JPG.Generic.4!c