14 indicators
ACR Stealer — Indicators of Compromise
Samit Hota·
#ioc#acr-stealer
Overview
Indicators of compromise associated with ACR Stealer. 14 indicators listed below.
Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.
| Type | Indicator | First Seen | Confidence |
|---|---|---|---|
| domain | res.explicittweak.cc | July 19, 2026 | 100% |
| md5_hash | 778aad49c1279d5a647759894155d40a | July 18, 2026 | 95% |
| sha256_hash | b2ab8825b84e6f0209cf713dcf7156c93ae82f37a6d9f0ca9072e228825c8d63 | July 18, 2026 | 95% |
| sha1_hash | 54fbaa90e47e9ea04deebb6dd2a5e8ed48e86a35 | July 18, 2026 | 95% |
| sha256_hash | 31cf473bb93abef0760d4992d45bafcd936edb7c26193c175f8491f8ffaef0e0 | July 18, 2026 | 95% |
| sha1_hash | 1d17d0e432e085af891afabedafaf9c1f1b3993f | July 18, 2026 | 95% |
| md5_hash | d1e5cbeac0e02e97a34aca7c9c54db5c | July 18, 2026 | 95% |
| domain | edge.kernelmonitor.cc | July 14, 2026 | 100% |
| domain | telemetry.incidentcenter.cc | July 13, 2026 | 100% |
| domain | cloudgateway.cc | July 13, 2026 | 100% |
| domain | releases.cloudgateway.cc | July 13, 2026 | 100% |
| domain | dl.connectivityplatform.cc | July 13, 2026 | 100% |
| domain | auth.predatordeuce.cc | July 13, 2026 | 100% |
| domain | predatordeuce.cc | July 13, 2026 | 100% |
Related content