IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE6 IOCs

Analysis of the Infrastructure of ARTEX, a Chinese AI Penetration Testing Tool #4 – The Birth of Copy Cat

AH
AhnLab
Published October 14, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAPT37PlayINFRASTRUCTURE101.35.6.190101.36.127.225101.43.9.229CAPABILITYMETA StealerPlayVICTIMunknown
Adversary(2)
Infrastructure(5)
Capability(2)
Victim

Indicators of Compromise

Indicators of Compromise6

TypeIndicatorConfidenceScoreFirst Seen
IP101.35.6.190
exploitintel-blogmalware
High
58
Oct 15, 26
IP101.36.127.225
intel-blogmalwarenetwork
High
58
Oct 15, 26
CVECVE-2026-75650
exploitintel-blogmalware
High
64
Sep 9, 26
IP101.43.9.229
intel-blogmalwarenetwork
High
58
Oct 15, 26
IP101.35.238.205
exploitintel-blogmalware
High
58
Oct 15, 26
IP101.32.51.86
exploitintel-blogmalware
High
58
Oct 15, 26

IOC Relationship Graph

IOC Relationship Graph6 total IOCs
IPCVE
IP5CVE1Actors2Malware2REPORTAnalysis of the InfrastrucAPT37PlayMETA StealerPlay
scroll to zoom · drag to pan · click IOC to open