>samit_hota
Back to IOCs

Indicators of Compromise

3 INDICATORSG1008win.curlback

CurlBack RAT — Indicators of Compromise

Samit Hota·
#ioc#curlback-rat

Overview

Indicators of compromise associated with CurlBack RAT. 3 indicators listed below, linked to the G1008 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
sha256_hash4bb923eb040aa13ca8fd409c31ee4729c60ddff32e350efe1c5a4a9168a065f5September 4, 202650%
sha256_hash72e70936f0dbe459142a1d867617c35f8d0cce5d18c6a49e1090a2a5adc8e558September 4, 202650%
sha256_hashfea1bc36632c71e5a839803469ef60ac47595d36b2c50934ac109ade6df06e61September 4, 202650%

Related content

Adversary Profile

SideCopy Threat Actor Profile: Persistent Espionage in South Asia

IOCs

XenoRAT — Indicators of Compromise

IOCs

404 Keylogger — Indicators of Compromise

IOCs

5.t Downloader — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call