IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE3 IOCs

Detecting Certighost (CVE-2026-54121): Sigma Coverage Across the Full Attack Chain

NS
Nextron Systems
Published August 4, 2026Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYGh0st RATImpacketSecretsDumpVICTIMunknown
Adversary
Infrastructure
Capability(3)
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise3

TypeIndicatorConfidenceScoreFirst Seen
SHA157090e59eb53739c561af6dc8a4eb586fb369e24
file-hashintel-blogmalware
Medium
53
Aug 4, 26
MD5a5ef2609b5f2944ac2390a191a534c26
exploitfile-hashintel-blog
Medium
53
Aug 4, 26
CVECVE-2026-54121
exploitintel-blogmalware
Medium
54
Jul 18, 26

IOC Relationship Graph

IOC Relationship Graph3 total IOCs
SHA1MD5CVE
SHA11MD51CVE1Malware3REPORTDetecting Certighost (CVE-Gh0st RATImpacketSecretsDump
scroll to zoom · drag to pan · click IOC to open