>samit_hota
Back to IOCs
G01273 indicators

Bashlite — Indicators of Compromise

Samit Hota·
#ioc#bashlite

Overview

Indicators of compromise associated with Bashlite. 3 indicators listed below, linked to the G0127 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
domainlifeisabouthavingfun448.duckdns.orgJuly 21, 2026100%
ip:port185.196.41.201:35342July 21, 202675%
sha256_hashe00d92ca28a2cfd75e96f71fc0408747f04942657fcab0f2a25ce79bc3ad23a8July 15, 2026100%

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call