INDICATOR1 SOURCE
URL http://shinestars-lifestyle.com/old_shinstar/includes/old/front_footer.old.php
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordÆ / PUBLIC MALWARE INTELLIGENCE
Follow the evidence.
Published file metadata, source observations and research history in one connected catalog.
131,398Catalog records
62,804File records
147,419Source observations
123Family labels
131,398 MATCHING RECORDS
INDICATOR1 SOURCE
URL https://hauptschule-schwalbenstrasse.de/wp-includes/Requests/RequestsCRks2P/++
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL http://217.171.86.137/rss_0.php
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL http://skategirlchina.com/wp-includes/data_from_db_top.php++
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL http://simplecreative.design/wp-content/plugins/calculated-fields-form/single.php
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://github.com/eset/malware-ioc/blob/master/turla/turla-outlook.yar
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL http://zerogov.com/wp-content/plugins.deactivate/paypal-donations/src/PaypalDonations/SimpleSubsribe.php
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www.welivesecurity.com/2020/05/26/agentbtz-comratv4-ten-year-journey/
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL http://warrixmalaysia.com.my/wp-content/plugins/jetpack/modules/contact-form/grunion-table-form.php
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www.brannenburger-nagelfluh.de/wp-includes/style-engine/css/index.php++
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://fjsconsultoria.com/wp-includes/css/csst4pwcp/++
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL http://169.255.137.203/rss_0.php
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://script.google.com/macros/s/AKfycbxxPPyGP3Z5wgwbsmXDgaNcQ6DCDf63vih-Te_jKf9SMj8TkTie/exec++
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www.welivesecurity.com/wp-content/uploads/2018/08/Eset-Turla-Outlook-Backdoor.pdf
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordFILE1 SOURCE
SHA256 92bb4ddb98eeaf11fc15bb32e71d0a63256a0ed826a03ba293ce3a8bf057a514
92bb4ddb98eeaf11fc15bb32e71d0a63256a0ed826a03ba293ce3a8bf057a514File hash published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordFILE1 SOURCE
SHA1 f5b60a8ead96703080e73a1f79c3e70ff44df271
f5b60a8ead96703080e73a1f79c3e70ff44df271File hash published by the cited source.
Collected 2026-10-08 08:00 UTCOpen evidence recordFILE1 SOURCE
MD5 02b4571470d83163d103112f07f1c434
02b4571470d83163d103112f07f1c434File hash published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
IP 45.191.66.77
Indicator published by the cited source.
Collected 2026-10-08 08:00 UTCOpen evidence recordINDICATOR1 SOURCE
IP 38.54.106.11
Indicator published by the cited source.
Collected 2026-10-08 08:00 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www.welivesecurity.com/en/eset-research/toolshell-an-all-you-can-eat-buffet-for-threat-actors/
Indicator published by the cited source.
Collected 2026-10-08 08:00 UTCOpen evidence recordINDICATOR1 SOURCE
IP 2.56.190.139
Indicator published by the cited source.
Collected 2026-10-08 08:00 UTCOpen evidence recordINDICATOR1 SOURCE
IP 104.238.159.149
Indicator published by the cited source.
Collected 2026-10-08 08:00 UTCOpen evidence recordINDICATOR1 SOURCE
IP 96.9.125.147
Indicator published by the cited source.
Collected 2026-10-08 08:00 UTCOpen evidence recordINDICATOR1 SOURCE
IP 206.166.251.228
Indicator published by the cited source.
Collected 2026-10-08 08:00 UTCOpen evidence recordSource labels and confidence are preserved. A filename or report mention alone does not establish that a file is malicious. Indicator observation dates describe the cited source; collection dates describe this catalog.