SHA1HighVerifiedSignal 44/100
760db2765f210a994a908a050cf5b12cce62f3b3
Location
Korea, Republic ofFirst Seen
Sep 26, 2025
Last Seen
May 25, 2026
Found in 6 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
SHA-1 Hash
SHA-1 file hash associated with malicious samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA1
Confidence
44%
Signal Score
44 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
6 reports44% confidence
6
Source reports
44%
Confidence score
Category tags
active scanactive scanningaerospace & defenseaerospace sectorand technology sectorsaptapt groupasiaautomotive manufacturingbankingbrute forcec2c2 ipc2 ip addresschinachinese state-sponsoredchinese state-sponsored actorcivil servicescobalt strikecobalt strike frameworkcommand & controlcommand and controlcommunication technologiescompromised systemscontains-embedded-jscredential accesscredential harvestingcredential stuffingcredit card servicescyber espionagecyber threatscyber-espionagedata exfiltrationdata store exposuredefencedefensedefense contractingdefense contractorsdefense logisticsdefense sectordefense systemsdefense technologydocument luresdonald trumpelectronics manufacturingenergyenergy distributionexecutable fileexploitexploitation activityfile-hashfinancefinancial servicesfinancial technologyfleet managementforeign affairsfreight servicesftp brute forcefuturego programming languagego-based malwaregovernment agenciesgovernment sectorgovernment technologygunra ransomwarehigher educationhtmlicsidentity & access exploitationindicatorindustrial automationindustrial iotindustrial productioninformation technologyinitial accessinjection activityinsiktinsikt groupiot securityit infrastructureivantilateral movementleslieloaderlockbitlumma staelermalicious softwaremalwaremalware campaignmanufacturing technologymarinemaritime transportmediamilitary operationsmobile carriersmobile networksmodelnation-state activitynational securitynetwork intrusionnetwork scanningoil & gasoil and gaspalo alto networkspanama targetspantegana backdoorpassenger transportationpayment processingpdf lureperimeter appliance exploitationperimeter appliancesphishingphishing attackpower generationpower systemsprocess injectionprocess manufacturingproof-of-conceptpublic administrationpublic infrastructurepublic policyquality controlrail transportransomwarereconnaissancereconnaissance activityrecorded futurerednovemberregulatory agenciesremote accessremote servicesrenewable energyresearchedsocial engineeringsoftware developmentsouth koreasouth korea targetssoutheast asiasparkratsparkrat trojanssh attackstrike c2supply chain attacksupply chain managementt1003t1005t1016t1018t1021t1021.001t1021.002t1027t1033t1036t1046t1047t1055t1057t1059t1059.001t1059.003t1059.004t1068t1069t1070t1071t1071.001t1071.002t1076t1078t1082t1083t1087t1098t1105t1110t1110.002t1136t1189t1190t1195t1204t1204.001t1204.002t1210t1486t1499.001t1530t1543t1547.001t1552t1553t1555t1556t1562t1563t1565t1566t1566.001t1566.002t1566.003t1569t1569.002t1571t1573t1583t1583.003t1584t1586t1587t1588t1589t1590t1590.006t1592t1594t1595t1595.001t1595.002t1595.003t1598tag-100taiwantaiwan targetstechnology sectortelecom servicestelecommunicationsthreat actortoolstor nodetradetransportation and warehousingtransportation infrastructuretransportation technologyunauthorized access attempturlsus targetswealth managementweaponized proof-of-conceptword documentxworm campaignzip file
Activity Timeline
May 25May 25
Threat Activity Heatmap
· Peak: 2026-05-25LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
44
SIGNAL
Signal Score
44%
Confidence
6
Reports
First seenSep 26, 2025
Last seenMay 25, 2026
Verified IOC
VirusTotal
Not checked
WHOIS
- description
- HTML document, ASCII text, with very long lines (949u), with CRLF line terminators
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 9 months ago · Last seen 1 month ago
Appeared in 6 threat reports