ctrlINT What the industry said about every indicator, with the quote

af8a983b9ada07eae1259bf2953abd40MD5 hash

Reported by 1 independent source · first reported by Kaspersky Securelist · last reported

Last reported 2 days ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “It is loaded by the legitimate file googleupdate.exe (original filename: jcef_helper.exe, MD5: AF8A983B9ADA07EAE1259BF2953ABD40), which is also delivered by the bootkit.”

    Kaspersky SecurelistVendor
    How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia

Indicators reported together

named in the same reports
Copy these 2 indicators · defanged

Also named with it: CVE-2022-21894

Thanks — we review every report.

Report a wrong value
What is wrong with af8a983b9ada07eae1259bf2953abd40 here?
No account needed. We do not store your IP address.