Overview
Indicators of compromise associated with Hermes (Stealer). 5 indicators listed below.
Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.
| Type | Indicator | First Seen | Confidence |
|---|---|---|---|
| sha256_hash | fa647a4d12cc887bd96cb2eb126f161cbcf47e84312094bb0dcc2429e7c8e296 | November 1, 2026 | 90% |
| sha256_hash | 578cc6d26bf7c5536d2c0ea0df5a788155e15d09e49054303915b535f4012791 | November 1, 2026 | 90% |
| url | http://193.148.56.77:8093/chunks/p_230c267932c77a53/manifest.json | November 1, 2026 | 100% |
| url | http://193.148.56.77:8093/files/hb/ | November 1, 2026 | 100% |
| url | http://193.148.56.77:8093/files/bld_4Aj52lBKdt6aPc06eCeFHbos.exe | November 1, 2026 | 100% |
Related content