IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE5 IOCs

Hackers Use Fake Claude Desktop and Bing Ads to Deliver SectopRAT to 29 Organizations

CP
Cyber Press
Published July 24, 2026Original Report

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTURE2.24.131.246CAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(1)
Capability
Victim

Indicators of Compromise

Indicators of Compromise5

TypeIndicatorConfidenceScoreFirst Seen
SHA1c1907d7be91f95903ad66d775c397302e7dd9228
c2file-hashintel-blog
Medium
53
Jul 25, 26
MD53eb6f92aedf74f109c7b4b0897ec39a8
aptespionageexploit
High
81
Jun 11, 26
MD5959c0694966742718e0d5387a3b1c105
aptespionageexploit
Medium
53
Jul 25, 26
IP2.24.131.246
intel-blogmalwarenetwork
High
73
Jun 15, 26
MD5d838120167ad44e18fe0aa6bc00ee586
aptespionageexploit
Medium
53
Jul 25, 26

IOC Relationship Graph

IOC Relationship Graph5 total IOCs
SHA1MD5IP
MD53SHA11IP1REPORTHackers Use Fake Claude De
scroll to zoom · drag to pan · click IOC to open