>samit_hota
Back to IOCs

Indicators of Compromise

13 INDICATORSG1033js.ghostblade

GHOSTBLADE — Indicators of Compromise

Samit Hota·
#ioc#ghostblade

Overview

Indicators of compromise associated with GHOSTBLADE. 13 indicators listed below, linked to the G1033 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
sha256_hasha5ca944459c08038bfabf7ddbfc6ec2505ef0dc22b987569ed295f7378f30d59September 5, 2026100%
sha256_hashc1b05dd8e7d060d2a40a859211528e90e62d0dc378f8af831933fe59122490ddSeptember 5, 2026100%
sha256_hashe02855a0c4e27b793644eaf6446da9596ed8d2d3c37b580beb111738010de441September 5, 2026100%
sha256_hash64c52a52d64ea44a8b8e1a9fa367e37a9940f847fcd142182711b1b862efb8a2September 5, 2026100%
sha256_hash26dd3693e4f86b2af02681680429a120e5389e2bdf6e4227f3ed45babfeb882eSeptember 5, 2026100%
sha256_hash25a5ca273abf934008ae2b5300f74f51670dfc702adf91b45ba6ccca32bf8c24September 5, 2026100%
sha256_hash71fe83847cdaf8c4d6c1aca90078dc4021cb96010062279d26338f06b4a7ba06September 5, 2026100%
sha256_hash4df20a173ae6da2291fd66cb28a165958a9a6f5998ef9a19e4e143b120f1a844September 5, 2026100%
sha256_hash77238255f541274ed0c8c1e5e0ffe034532a210a3aaba94d63a05a3499362022September 5, 2026100%
domainodsj13.ccSeptember 5, 2026100%
domainwww.amazonawsapirds.comSeptember 5, 2026100%
domainxncb79.ccSeptember 5, 2026100%
domaincdn.data-1283.comSeptember 5, 2026100%

Related content

Adversary Profile

Star Blizzard: Russia's Persistent Cyber Espionage Engine

IOCs

404 Keylogger — Indicators of Compromise

IOCs

5.t Downloader — Indicators of Compromise

IOCs

Aberebot — Indicators of Compromise

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call