eea08fbf3720d638af1d313d3ce369708b77d7891379d5c5871dd7f36667ed0cSHA-256 hash
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 3 months ago
What the reports say
1 report, newest first · the exact sentence from each-
ClickFix to Cash-Out: Anatomy of a Mexican Banking-Fraud Toolkit“| eea08fbf3720d638af1d313d3ce369708b77d7891379d5c5871dd7f36667ed0c | SHA-256 | clip.ps1 | CLABE clipboard hijacker |”
Indicators reported together
named in the same reports- hxxp://68.211.161[.]46/files/in 1 report
- 68.211.161[.]46in 1 report
- hxxp://68.211.161[.]46/in 1 report
- hxxps://ww.ssinvestigaciones[.]com/login3.phpin 1 report
- ww.ssinvestigaciones[.]comin 1 report
- hxxps://ratonvaquero2026[.]online/in 1 report
- ratonvaquero2026[.]onlinein 1 report
- hxxp://68.211.161[.]46/validation.txtin 1 report
- hxxps://ratonvaquero2026[.]online/files/in 1 report
- hxxps://negratomasa2026[.]online/dashboard2/recData.phpin 1 report
- negratomasa2026[.]onlinein 1 report
- hxxps://monteviral2026.duckdns[.]org/in 1 report
- monteviral2026.duckdns[.]orgin 1 report
- hxxps://monteviral2026.duckdns[.]org/files/in 1 report
- hxxps://gestionmontelavaria2026[.]online/dashboard2/recData.phpin 1 report
- gestionmontelavaria2026[.]onlinein 1 report
- hxxps://osogransd[.]online/in 1 report
- osogransd[.]onlinein 1 report
- hxxp://216.250.112[.]100/validation.txtin 1 report
- 216.250.112[.]100in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.