ctrlINT What the industry said about every indicator, with the quote

cffca467b6ff4dee8391c68650a53f4f3828a0b5a31a9aa501d2272b683205f9SHA-256 hash

Reported by 1 independent source · first reported by Elastic Security Labs · last reported

Last reported 20 months ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “…acker collected fontdrvhost.exe, fontdrvhost.rar, config.ini, and wmsetup.log, it executed fontdrvhost.exe (cffca467b6ff4dee8391c68650a53f4f3828a0b5a31a9aa501d2272b683205f9) to continue with the intrusion.”

    Elastic Security LabsVendor
    From South America to Southeast Asia: The Fragile Web of REF7707

Indicators reported together

named in the same reports
Copy these 20 indicators · defanged

Thanks — we review every report.

Report a wrong value
What is wrong with cffca467b6ff4dee8391c68650a53f4f3828a0b5a31a9aa501d2272b683205f9 here?
No account needed. We do not store your IP address.