>samit_hota
Back to IOCs

Indicators of Compromise

2 INDICATORSwin.castle_rat

CastleRAT — Indicators of Compromise

Samit Hota·
#ioc#castlerat

Overview

Indicators of compromise associated with CastleRAT. 2 indicators listed below.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
sha256_hash6dddd14c82abc88425b835ea271d6b0b3467fc6a0bdb0019e41ac85a6b55cdd9September 27, 2026100%
urlhttp://172.86.123.222/Smokest120.zipSeptember 27, 2026100%

Related content

IOCs

404 Keylogger — Indicators of Compromise

IOCs

5.t Downloader — Indicators of Compromise

IOCs

Aberebot — Indicators of Compromise

IOCs

ACR Stealer — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call