>samit_hota
Back to IOCs

Indicators of Compromise

1 INDICATORSwin.foalshell

FoalShell — Indicators of Compromise

Samit Hota·
#ioc#foalshell

Overview

Indicators of compromise associated with FoalShell. 1 indicator listed below.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
sha256_hash1e672d038cebc619d93186418fa98f6499dbdb9cfdfac54f366c61a4a4ee4362October 17, 202650%

Related content

IOCs

404 Keylogger — Indicators of Compromise

IOCs

5.t Downloader — Indicators of Compromise

IOCs

Aberebot — Indicators of Compromise

IOCs

ACR Stealer — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call