IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE5 IOCs

Hunting Pandas

CI
Cyber Intelligence Insights
Published April 4, 2025Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAPT41INFRASTRUCTUREjpkinki.com139.180.192.16345.76.132.25CAPABILITYPlugXVICTIMunknown
Adversary(1)
Infrastructure(3)
Capability(1)
Victim

Indicators of Compromise

Indicators of Compromise5

TypeIndicatorConfidenceScoreFirst Seen
MD5e30fb7845d2cda285b40e57001cfdb71
file-hashintel-blogmalware
Medium
53
Oct 9, 26
Domainjpkinki.com
intel-blogmalwarenetwork
High
58
Oct 9, 26
IP139.180.192.163
intel-blogmalwarenetwork
High
58
Oct 9, 26
IP45.76.132.25
cryptominerintel-blogmalware
High
58
Oct 9, 26
MD597dc22b3d6a00ef55d774041bc3b615f
file-hashintel-blogmalware
Medium
53
Oct 9, 26

IOC Relationship Graph

IOC Relationship Graph5 total IOCs
MD5DomainIP
MD52IP2Domain1Actors1Malware1REPORTHunting PandasAPT41PlugX
scroll to zoom · drag to pan · click IOC to open