IOC Radar
TLP:WHITE13 IOCs

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

MT
Microsoft Threat Intelligence
Published July 16, 2026Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREhttps://ipfs.io/ipfs/…https://ipfs.io/ipfs/…85.137.53.71CAPABILITYCobalt StrikeVICTIMunknown
Adversary
Infrastructure(3)
Capability(1)
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise13

TypeIndicatorConfidenceScoreFirst Seen
SHA25624b9ee242f21a73b55f7bb3297eafb33c60840907386b542ed79fc6b72365168
file-hashintel-blogmalware
Medium
53
Jul 17, 26
SHA25634014776d3d3ff11bc4439b02fd7ac0f02a887eb3a052eeafff236e2f6db8ad1
file-hashintel-blogmalware
Medium
53
Jul 17, 26
URLhttps://ipfs.io/ipfs/Qmet4fhsAaWMBUxNDfREHwgiyDeSWy4YSYs9wiKUW5jGyf
intel-blogmalwarenetwork
High
58
Jul 17, 26
SHA256bfaeb987faa6de2b5a5eb63b1233d055215b09b0349a9394f2175fd7cdf385e4
active scanc2 fallbackcross-platform
Low
35
Jul 14, 26
SHA256b9993a8ad0518849416798cf29668256ccb96598fc4423501ccab5312812653a
active scanc2 fallbackcross-platform
Medium
43
Jul 14, 26
SHA256082d733db0687dcd768104972b065d4b58cb1e6043688c6c20fa3702337f36ab
file-hashintel-blogmalware
Medium
53
Jul 17, 26
SHA256d425e4583cc6185d41e95c45eda00550045a5d1919b9a012236a4520d009dbd7
active scanc2 fallbackcross-platform
Medium
43
Jul 14, 26
SHA256b270bdf8e2274ea1af0a6eed74d8f10e5fe61012d6cc226a43cc7cc7fd9f6292
active scanc2 fallbackcross-platform
Medium
43
Jul 14, 26
SHA2568351d251cf0b5a0bd82242deaa0a14e3e1394418d55c0f4259dac4303b79fc0c
file-hashintel-blogmalware
Medium
53
Jul 17, 26
URLhttps://ipfs.io/ipfs/';
intel-blogmalwarenetwork
High
58
Jul 17, 26
SHA2566e78713b75bd34828d49896176627f7face7aa9036cd874f2e02d9f23a9a9c71
file-hashintel-blogmalware
Medium
53
Jul 17, 26
SHA2569b2e65db653ca8575c9b10eefb9a80c6006404812c2ec212bf5675e3c690233b
file-hashintel-blogmalware
Medium
53
Jul 17, 26
IP85.137.53.71
intel-blogmalwarenetwork
High
58
Jul 17, 26

IOC Relationship Graph

IOC Relationship Graph13 total IOCs
SHA256URLIP
SHA25610URL2IP1Malware1REPORTUnpacking the AsyncAPI npmCobalt Strike
scroll to zoom · drag to pan · click IOC to open