IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE21 IOCs

Mirage Kitten targets Middle East and Africa region with new malware

SE
Securelist
Published July 28, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYUNC1549INFRASTRUCTUREglobal-reds.commaadinglobal.comneexportfolio.comCAPABILITYCobalt StrikeVICTIMunknown
Adversary(1)
Infrastructure(6)
Capability(1)
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise21

TypeIndicatorConfidenceScoreFirst Seen
MD5a239e655709a2518dd0b7bdbed163679
exploitfile-hashintel-blog
Medium
53
Jul 28, 26
MD5c832ecd135781b11f59e3fffb3d2b6ac
file-hashintel-blogmalware
Medium
53
Jul 28, 26
MD5afb1c1583606599c7272cfb33cc6f498
exploitfile-hashintel-blog
Medium
53
Jul 28, 26
MD5f7d36cc5904a53252d2bb3d21615134f
exploitfile-hashintel-blog
Medium
53
Jul 28, 26
Domainglobal-reds.com
aptespionageexploit
High
69
Jul 28, 26
MD55fa15ef96808ea82f0a6176f0bb4b386
exploitfile-hashintel-blog
Medium
53
Jul 28, 26
Domainmaadinglobal.com
aptespionageexploit
High
69
Jul 28, 26
Domainneexportfolio.com
aptespionageexploit
High
69
Jul 28, 26
MD5ae628efa305387b633dce82f9364875b
exploitfile-hashintel-blog
Medium
53
Jul 28, 26
MD542f847597109da2a220391bb09d00676
exploitfile-hashintel-blog
Medium
53
Jul 28, 26
MD5d09b14a2fe01c7363ecc56f5d046162c
exploitfile-hashintel-blog
Medium
53
Jul 28, 26
IP172.86.98.113
exploitindicatorintel-blog
Low
31
Jun 18, 26
Domainbuisness-centeral-transportation.com
aptespionageexploit
High
68
Jun 3, 26
Domainrealhealthshop.com
aptespionageintel-blog
High
69
Jul 28, 26
MD5c90f0efadbf322e5eb1c4103a38c30e6
exploitfile-hashintel-blog
Medium
53
Jul 28, 26
Domainaecert.org
aptespionageintel-blog
High
69
Jul 28, 26
Domaintjconsultingservices.com
aptespionageintel-blog
High
69
Jul 28, 26
MD56038d42af0affd1fb263f470c0956f6b
exploitfile-hashintel-blog
Medium
53
Jul 28, 26
Domainthehealth-life.com
aptespionageexploit
High
69
Jul 28, 26
Domainhealthcarezoomcenteral.org
aptespionageexploit
High
69
Jul 28, 26
Domainbusiness-deegital.com
aptespionageexploit
High
69
Jul 28, 26

IOC Relationship Graph

IOC Relationship Graph21 total IOCs
MD5DomainIP
MD510Domain10IP1Actors1Malware1REPORTMirage Kitten targets MiddUNC1549Cobalt Strike
scroll to zoom · drag to pan · click IOC to open