14 indicators
Phantom Stealer — Indicators of Compromise
Samit Hota·
#ioc#phantom-stealer
Overview
Indicators of compromise associated with Phantom Stealer. 14 indicators listed below.
Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.
| Type | Indicator | First Seen | Confidence |
|---|---|---|---|
| sha256_hash | 9aa928b433983f53758e42961aa0cf8096a4211a5562bfcd7ba3cb63d902282b | July 20, 2026 | 95% |
| sha1_hash | 98c8c5d84a81cc068d24a68b1e2bb3dc7babae41 | July 20, 2026 | 95% |
| md5_hash | c8a7ae786c0294734130e1685a6f5ae3 | July 20, 2026 | 95% |
| sha256_hash | 330f79845eb9694405707e1b2ef8621e8673920b3da8ccb3a4136418b7404254 | July 20, 2026 | 95% |
| sha1_hash | e162d5f789a9cba57f46da154fabdde31a72683b | July 20, 2026 | 95% |
| md5_hash | e14ec518b3e9768fd51d95f13c60dea1 | July 20, 2026 | 95% |
| sha1_hash | b0a40cb77958323603879c3595142914b78c3308 | July 15, 2026 | 95% |
| md5_hash | c1a5bc0019c3f894bc908e0c0c0e3ff7 | July 15, 2026 | 95% |
| sha256_hash | fbec2d3d5a42f56aa8ddda61d924445dfa11580f6b98d34006701639b7d65ad7 | July 15, 2026 | 95% |
| sha1_hash | 428710fe6cd300d607805b25cea48516275eed76 | July 14, 2026 | 95% |
| md5_hash | b7e5d882f64df87f2d70b9df4df1033f | July 14, 2026 | 95% |
| sha256_hash | 03ff10f626253ac8613b7c489170d602c524b9e8b69ebc13d677a800b0bdb0db | July 14, 2026 | 95% |
| domain | exczx.com | July 14, 2026 | 100% |
| domain | ftp.episcenergy.com | July 14, 2026 | 100% |
Related content