>samit_hota
Back to IOCs

Indicators of Compromise

12 INDICATORSG1052js.contagious_drop

ContagiousDrop — Indicators of Compromise

Samit Hota·
#ioc#contagiousdrop

Overview

Indicators of compromise associated with ContagiousDrop. 12 indicators listed below, linked to the G1052 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
urlhttp://84.200.33.163/302/302mSeptember 30, 2026100%
urlhttp://84.200.33.163/302/302wSeptember 30, 2026100%
urlhttp://84.200.33.163/302/302lSeptember 30, 2026100%
sha256_hash9522e6bf4b6291f15acfff7b7340434309e0e4ae3855f717d7a0ffce5a126c24September 30, 2026100%
urlhttp://84.200.33.163/302/parser.jsSeptember 30, 2026100%
urlhttp://84.200.33.163/302/tokenlinux.shSeptember 30, 2026100%
sha256_hash6497f4d0c65e56b12ea4dfd170bfac891cf8b4612fa4e8fa4825cb59a8b96ea8September 30, 2026100%
sha256_hash09192b6e580fbad5ddbf4fec15fd90eca678ac060f232bdc1da67c029842c35aSeptember 30, 2026100%
sha256_hash47c0d92b76fc8399a217da9e169042ee66639bb84da848e6db259736f30320b0September 30, 2026100%
sha256_hashbde5c02bb3b72f8a5564a63b56337cffec5f2052d7f78d123269dd55125ba0c9September 30, 2026100%
sha256_hash055c299bc45467b10f65131c8f3118e42844565022e4cac3f22f531884c7f9eeSeptember 30, 2026100%
ip:port84.200.33.163:80September 30, 2026100%

Related content

Adversary Profile

Threat Profile: Contagious Interview (G1052)

IOCs

OtterCookie — Indicators of Compromise

IOCs

404 Keylogger — Indicators of Compromise

IOCs

5.t Downloader — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call