IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE2 IOCs

HoneyMyte CoolClient Rootkit Hooks Windows Nsiproxy to Conceal C2 Addresses

CP
Cyber Press
Published August 17, 2026Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYPlugXVICTIMunknown
Adversary
Infrastructure
Capability(1)
Victim

Indicators of Compromise

Indicators of Compromise2

TypeIndicatorConfidenceScoreFirst Seen
MD59460e150e1981d5c165043520c5c12fe
exploitfile-hashintel-blog
High
56
Aug 15, 26
MD52d7c8780e97409770a9d4f31c66c9d63
exploitfile-hashintel-blog
High
56
Aug 15, 26

IOC Relationship Graph

IOC Relationship Graph2 total IOCs
MD5
MD52Malware1REPORTHoneyMyte CoolClient RootkPlugX
scroll to zoom · drag to pan · click IOC to open