26f906a2a4276b1968a8ce956a7b342aa9bc26f60d32c14668223877f569fb3fSHA-256 hash
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 3 months ago
What the reports say
1 report, newest first · the exact sentence from each-
ClickFix to Cash-Out: Anatomy of a Mexican Banking-Fraud Toolkit“| 26f906a2a4276b1968a8ce956a7b342aa9bc26f60d32c14668223877f569fb3f | SHA-256 | rotor.ps1 | Keylogger rotator |”
Indicators reported together
named in the same reports- hxxp://68.211.161[.]46/files/in 1 report
- 68.211.161[.]46in 1 report
- hxxp://68.211.161[.]46/in 1 report
- hxxps://ww.ssinvestigaciones[.]com/login3.phpin 1 report
- ww.ssinvestigaciones[.]comin 1 report
- hxxps://ratonvaquero2026[.]online/in 1 report
- ratonvaquero2026[.]onlinein 1 report
- hxxp://68.211.161[.]46/validation.txtin 1 report
- hxxps://ratonvaquero2026[.]online/files/in 1 report
- hxxps://negratomasa2026[.]online/dashboard2/recData.phpin 1 report
- negratomasa2026[.]onlinein 1 report
- hxxps://monteviral2026.duckdns[.]org/in 1 report
- monteviral2026.duckdns[.]orgin 1 report
- hxxps://monteviral2026.duckdns[.]org/files/in 1 report
- hxxps://gestionmontelavaria2026[.]online/dashboard2/recData.phpin 1 report
- gestionmontelavaria2026[.]onlinein 1 report
- hxxps://osogransd[.]online/in 1 report
- osogransd[.]onlinein 1 report
- hxxp://216.250.112[.]100/validation.txtin 1 report
- 216.250.112[.]100in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.