40dead1e1d83107698ff96bce9ea52236803b15b63fb0002e0b55af71a9b5e05SHA-256 hash
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 12 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
Unmasking MuddyWater’s New Malware Toolkit Driving International Espionage“… in the document shares similar logic and matches code with macros used in past MuddyWater campaigns (hash: 40dead1e1d83107698ff96bce9ea52236803b15b63fb0002e0b55af71a9b5e05).”
-
Tracking MuddyWater in Action: Infrastructure, Malware and Operations during 2025“40dead1e1d83107698ff96bce9ea52236803b15b63fb0002e0b55af71a9b5e05”
Indicators reported together
named in the same reports- screenai[.]onlinein 1 report
- 6de859a27ccc7846…6e32780e498ain 1 report
- bed6506f8f528188…c750545292fcin 1 report
- hxxp://159.198.36[.]115:4444/chromium_stealer_user.exein 1 report
- 159.198.36[.]115in 1 report
- 668dd5b6fb06fe30…43d801bf1a1ein 1 report
- 5ec5a2adaa82a983…6ac98bb91839in 1 report
- 1883db6de22d98ed…f0e8d40c4c56in 1 report
- 3ac8283916547c50…6a5b6ae255e3in 1 report
- 76fa8dca768b64ae…561e48e39c75in 1 report
- 3d6f69cc0330b302…ce4a1a3932cain 1 report
- filetransfer[.]ioin 1 report
- sync[.]comin 1 report
- 5f22f4c4fdb36c4f…7b9ef0b691c2in 1 report
- f782dfdc7ce624f9…561c8af13db0in 1 report
- hxxps://netivtech[.]org/registerin 1 report
- netivtech[.]orgin 1 report
- hxxps://netivtech[.]org/imalivein 1 report
- hxxps://netivtech[.]org/requestin 1 report
- hxxp://46.101.36[.]39:443/imalivein 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.