VARIANT DISCOVERY
THE HIDDEN MALWARE REPORT: UNCOVERING MALWARE VARIANTS IN THE WILD 2025
Download 1006 Hashes
New SteelFox Trojan mimics software activators, stealing sensitive data and mining cryptocurrency
Source: SecureList Published: Nov 6, 2024
Hashes in published Threat Report: = 4
Variant Hashes found by Stairwell = 71
029abc31f12ff24909c74f2f797da73efcfa4a1fffc528062af916cb409ad63f 0588bbaa2fd78c1dd4fee91c2548681f7aee3a0ad0b01cf1cf1118ddd0120d44 0bddc5074c6f326420bb1b87819f33fa9e649a8d3523a395f3281fababaafd9d 0ea57a7b458cf680712e21e77814a995edf52c20e9f720a36569689dd03ab719 0ebe30a45a75734a93ad0a955ccf0a0012eb7ab4fdbeebd174f0a7496e290881 1b6a852f995ec3a10ec6700680a081ed70fe14054960591d3a3698fa774c1886 247ab830aa6aca42a035e5f7b6e3f437d3c9b3bc096024b2ad779aec9b940af1 266b549774c81fe1b299dc77e85c07dd6b95fa3593d1a8457fcdbc852c9e84b0 275a831371b39bc4081f1768e457cc5fdd298a19d6384a14b04669e0172d830e 29116a7162d1bbcbd4bcf1d3695814eb7770feb51c5d48365b8b64ad97ec5fed 2a309eb56e31701db3be98e4c7374a9f52cb5de93507ab30acfdc3ace41b1943 2c635299abfef765dba8dc378b79699cdb2c336faf6a7a64ded0e6656182854c 2cfbcb48cc814e2721ad260504027f2dbda63172849215eb61fb69863d5f9f85 2e54cefe74a3fc16a6274d6cca483946e8ff21f652993f5409d1a463a85e71d9 2f75a40c6a84e91159b17fc4c642a2dbb3eed2bf3ea75fd3504b8d652ce2638c 35403fa7b0249286e0663236415602e7ed84c68ae8e1f6ae66d76508604298b3 4c757bbdffe72a861e714d29f0f5a5b3fd81785fa4c5312b65b95fcf650c8b8e 4e8e6f0e3e18d9f4d932ac8214c4afe38c85e4da0d7f47d3f2b82c8d5d4c15c9 534c9fdf8edb37ad60131f5c5da91c504b5bdf3201729b67d9a31853e03387c5 571582cc72c3e0fa597232f4c710034168abe4cf16fb5b9f5b08cec1bd637761 5753f7241cf5c1140067d4080c679f4b933b7edbfe78ce174dc02b8098269452 583eff760e78e0de46d3871df651dda3af824de29a4d4983a5fc5371babad5ec 5ec90650e31e2e4f7c1a5d1f9cf1800d61e431b9257ec996d74ce80475c428e6 69f260eee39474d5c6f186d3b305192dd5afebafc0b139a7d4d2600a3eb0a4a8 70fced8b2c3c21f11972ad5d68b679e1357bad6634fbe1d7dd5ab7a72720203e 7100e275efaa5941bdb413bf5c9ca23471a9d0b5cebfcda7c621adf71ba6987d 7153886695a9903fa9c7e0bcc5d98957b87393d5ba16b4d40d759773e660fa1b 72fc609b6f6443889187c0744a18f9ebdf521f3f200397b6b102802932bd66dd 7a4c199b7abb01f670d349eb2d8c453ca25beb8fe4368dea46a4d2ff77d84abc 7bd121883758182ef93b6fac564bb2109a571a823c087ca94cecf47997c70516 81e8f4ad07736953946e7aea430edc8be011a5233184d0157eb564290f180913 87e3ee884bc946b2a5367343dca190ac98da22fc00d4a032c2c006f26090dbf4 8d138c67a0bd871ed0529e533d79fbf22a0fc680fd57e8317892ff41ab5f4e4f 9008d12b8b26922fe95a642328fbd480a9daae808c09159b4b4a9279bf25914f 91685cc427df8cb969839716a416ccfa457cd69271c828254c7344c5c02b0877 94b73f5058902d320f44b842d758435e6510c81f8806bc003978af36d08dfd37 9531c554cb6e5563e6fa673c96289dfffb08954259e7589d7b0623c5429c74d7 95694fc41ba19516d68d2b07aa9b4031a73adb5935bc92fcd4448bfa06b45102 96d88b81cf6324bd6e0e3f74f49af8f88ea1ad4c4854aa4c24fd72d35ad50bf9 981e658cfe83980cc8ed3b8ed17d0cd5924ac25c421bdee4e1ea6d7fc94255be 9c109fa19aec46fb91d0388a31b8bb96ee2c9a6f2c6a3844b1fc9aa7a2e10872 9c2bdefa56e5d95e1c9e3951e7f368aae0981ebf2e77671963161cab18931663 9c699a834a617205e4df915055f6ec6a3dba21578d13f5dae8b69448cb346f71 9e7b2b978b8a098f2be378ca13f81c2d1a3fda1274e011a7a97acab93b0e971b a0b24b0b64d651730645ef1c577da8bcb775f15c6f8e7971cba9234a4a6b7331 a10a5dd11dae45a5ec8c0452e5a53f51a4603c4018fb3c7bf0e621c7edb11bf3 a40806b0b5c34b37578b080ab6e7116f1b7e8e769a8d6bb56bd96362a47f38fe a539691220dce570a03d1373df871e8f798822fd95b44c4a7227611437d9b78d a599341526c7fe073fe998f6737f9f2e57a4e952cfb7428975b5543185bb7d11 aa624dff44387c3fd947ec2be31d1f50388dc7017e4ea5db7b25d8ef4152ada3 ae8907dbbc41660e596610828382af4d0dcf9b356987ecf3217d5e069b28f35a b36a72ae68dd23744444282c9e36edb92847b1d499195f2e6bfa0b141439236b b4f1054e42717343e4ab67a1d762b3d9a395a588405a1da88f679fc2835d95e7 b55de811bad2a626d9025bf4bf268ec315f38a4ce6ff9444e71a5b7cec8fc1e9 b730be9ac3cc7762d5003e8d2b13b7141ce32b368866195dd33ef60ef8d9c006 b9606bdfec4e54e5578b8d20da9d11d1685df840db76f7229ea788867be78895 c573fd43c0f251b3d75f5189ae7f20e5bb8c7694690debe10fd9b82c3c6461ad c651681d117b739d77d8467c7193f5e17f8a8dcfd0076ebc363f88399fc9cacc c77695e74527e0fc9e5fb7a125e7a3640360781fad82fd65e90be38f2dae5b98 caf30641dd93808837296ce3da3be318fdf909b791bb4d62ef89a2021e89c9bc cbc9d518ad553157ffacb8b3e2f3985ea83a52e3ed5a09efaf7a6f2760df55e9 d0363a02d169f761fdb91195a8115be68556dd83ec9a5d05a6c10e5efa00f4b0 da4853ee613aec8c47fbea40b00ff86b8774d64ba4f3e4eaa3d6e25ab50c209a dd670fa805cee006df59862f4d5bcf9a6e4bb830de4fb515a07f9b3865a9fb60 e5b312dad8b9661fc457c868eccabc2becb375cf8b208f433c80b4a081e4c8b8 e620ef96fd2fab84984953a416e0fab53e2c341c43f30226a3e34d1b610ebc2a e8bc74183f6d8221361ceb173bad57bc8325c5235097e0516e11bfe3dc567c85 f216568d714c388a0a18464b9f75aabd0778858ec8d29068660c4f7e00400b8c f55247c82f4b2f737a9b5efb8e0b26f1154f0a7ee1ec33d697f56c8de0d75b1e f6a66033eae736538f450fdd405fa51a28f4feda17959a2e04f8e7d5366d8bc4 f8183418dd3e60e99e42920e88bf3a6dbca6d7868940370d8215bc6c6d1b57f2
Recent Keylogger Attributed to North Korean Group Andariel Analyzed Through A Hybrid Analysis Perspective
Sources: Ukrainan CERT Published: Nov 6, 2024
Hashes in published Threat Report = 1
Variant Hashes found by Stairwell = 6
0f972786adacb5c9701f2e60201135952862eefd0845ad7296c4012b8ecf5d3f 445f233c1690aa3d40c2d5c7c3436affa8e4e78760a63caecb86927ba162e613 485465f38582377f9496a6c77262670a313d8c6e01fd29a5dbd919b9a40e68d5 9a0ad1c6be23229fb029c3ac6bbcc187da2d0faf6a0b934c45fc629cdedb76b7 a7d68938baaf71f6fdb698b71a667544a98c603ff958c1e88f31956456808747 f64dab23c50e3d131abcc1bdbb35ce9d68a34920dd77677730568c24a84411c5
Cyberattack by UAC-0050 using tax-related themes and LITEMANAGER
Sources: CERT-UA Published: Oct 30, 2024
Hashes in published Threat Report = 25
Variant Hashes found by Stairwell = 56
0169ae0195a66b61af94ea1bdbdc039113003d90d12262144838d71e4b089fc3 07952db0bab912c256c800ddbc2142107e14805ae01c363e17e7cc78d1b4c675 08498fec2b7de6bb7e624b84c64f554ed5f2c814b636d5c5b50deb3b98a73619 0a5fad014d435b3c9d8eadfa8d552c6a87c996fc6135a517181bcb7c7191f0bc 0e1c6897afc7e43cfae11df1ccb45ba83db83855d736c429bbb50110dcd91699 137d8980f0a94dcea338ff77f6be12091616bc4de364c0dc69e7998871c5924e 162061884914970a39cb80ef274ee07b0d398fab509d7c9b5dffe911b6dfbc8d 1666b1c2ae1af47b252abbc69c80281f81a7ea979f1d784fadc19ed6feec59f0 186e3997592ce73c6bd844a5e6d2c109704135b1dde88e74a57b34b319c5e81e 1dda1be638070e2e638311945d1df6515e6cddc1c73ca471164e371209c5ffbc 1e396c4066ac8f421a54893442a0d76c4f8d4146e63825d67dfc0da782e73ee5 1edb0a86f012bf02b9be43e6905804d1b11f288527304873e3116faa4faa2249 21268a5a0bfdf2516179dbe3fe4629dadc039755b2c146070686a141152e91f4 2221c1c2982743e7bb86a3a35c54c024e51538dff209fad45eb208fcce39103c 2c7e9835f6a5535c42c51ad4f05587cb9c9dda08b39cde9d5c14c5071747cf64 399335030f80df7cc6097cc05cc101e437dc77856bbc81be004f2a9d541dadd9 39e950bc0755a0d72ed3691680cac380ebaaa63d5b98cf9ccfb59d98b0ff281a 3ae714c2f5ab99be70a0bc41a019008ca030066a742f1cd36b4151b150b0225a 3b24a314ac6d1aba7d782bedfd2739f81a16220b0613cc917029bb93a76d3847 3b785acc36473ae8313e5d7d89e712968cbe5e77ee42353686152a436613ca2f 47c088c4f58fdcd668a09ad9b1d2324f68b7928cd5c517c2d882c66963db37ea 48ea9427a47a53366d70afb1b19e1563e36a0868d62cc2b86d2ac2da53002614 4d139e4c8c65876032039f7516d78b830e5f09cc0d03be482dc261d8ff7d8a8c 5338c82a0791ac7b685fb1a1282b2f4ecabda14565d0dd18d5bec1ec53edecf3 5c73f95fe6cb28a057f5752df1ed75868768a0d8554eea9d7e9e28ed00026b82 5cb0e27d707653c4ee16ad24d61aea27d168ec03965bf06675206fde06604ef7 5f6b38d8602d343d4b94fe1690f606c9e234c0cb6d9f02966802793f343d54ec 62410e8399acf7834c74012783bde3fe9ff244e048141c4a96a65bec06895f37 65bd0ab701813284a2254130ae388e21ebcb5d16f0523e2fba4d081ced0d2403 66524529b7f3e73a721288b900414fe867974a9475887acc40a95275f4d0304a 712092c51df36ac0418848b8dbcd93df625407ba2bf43f6b734490f7bd5fd78d 78bce0c5b34060ac7b5f1bfab72328ef6b20ac98d5442c98e8b1f39dc683ce3b 8d20e3ef9b42d8dc1fd0a2b690a59e5efa96850558cd58cd4387cbac428defbf 8d91e21450cb579ef34e6e7cb6bb4cd6f7a4ccc2bdd5cf2f08b9a9b59c5c9fde 8e533f258b1c69d060db4ca372b6c46349443595016db3e35108f80166a42f12 8e6fd9aa4b32edcb57899f05ef682bcb06dff15b30838395722af0f73d9a2c3a 92a5ccda8674d00ada64eeb2e376f04543a2cecd1c0439f9a08163d47bbddb1e 9de6a66666acac49e1439571e051de05625af1ced1f43da6f35f29d09366688a a14b5a876afc9c7f67607a4ff6aac16940bbf35ac41de14a7495fab6f7c482e1 aeaedf6bf429b1f7f7b041649a45157a5f8cd2587ebb463e667e4d64e9e1521f afa95f98e3305bf19ea2fc415506fed5bf6111c62b577e3e171e90c10287e78e b394fdc1acbf2b17dda8c418f3d19740fff81df9c4f658b50c88221b7937e41f b550de46aecedf589bcb6ff59ddf0a69199714dd6d4a9f8241046866d37adfb4 bac30942c9cad692b8425c56560aca9698c92cdef82aa6687a45e53a866ec973 bce888804dc4ac25884e00577c2bc54fabc0735a32bf1a11b575e5e4e755478a bceee182d7fa15617184cff2a168ae1f1a093c64d7538ae6e2ba7cc8524f33aa c382eac2d50605ccc6d3b69b97b82f95bfcbe28d5dbf3a7e277db2853b073525 cc6cdedd25102fd91079ab38a02d683a7ddd7ae8bd8a601ed11933a490dbdea0 cf65d8b562a1409c06d795530188c74ec9e8a4ddf35588e2967181f7fc187f3e d340cd336283177faab0023c317d47670b99ee974791a93e709d2bf7b924c608 e194e61e233aa478866de5120d4b98af56c69794439dcceb235fe750fc3b5c85 ecb1847563ff8ff7868397704138d79bd3a5309b7737c1a46de2034188151c8b f1fa6a2efc8014172c39d544d69ae2a97b2ece16b9bcd7b2483629db2005c51a fac7a94d52edd76e7d2e081a3505081b4107d4d504d875340a695cd1fb85a201 fc5759eecff4ab73882a819db027fe4073240957691dafb005f2692bb8b33108 fdb563160ae6bca781e5c3e4d795754dd4d77e981841805c4baef113d99146cd
AsynRAT Trojan – Bill Payment (Pago de la factura)
Sources: SANS Published: Mar 13, 2023
Hashes in published Threat Report = 3
Variant Hashes found by Stairwell = 127
044cacd5ac37289f51cb2560deec5d5eb2a299f37cc7632673fefc70196e5452 047a9345f6519509a8775ef83fb8fcac47b9dcbae5e9d046f9e4b2fa7aed1869 0534ba3ad2e384151a535e13d3f2f7f1d496932085725c824a047ccac2b7eb5e 056c567602b2fa5f24dfb52692c8dfdbe9bdb66f28916b6b5da3fcc25b7e4d56 0849fedcc35894a8bb3a0978d924cf749dfdfcda64cf251e7199ac9998fcc251 0af03480a1bbf9d304800725ba9001f0da8f8f207a33e1cc0f27099872b3ac5d 0b9145613da75b127de6d9f0094a7b2813e3c8c651aec50aee83c1e722e63be3 0be53232c436fe0c83ebe734c96ba6a1c159d5fa7c502f3f68bd0493394267eb 0cdfb97393e9908af6214b60c58a805bbb8a95cf719f051dbd0c95376372949b 0d8ae78d3e80346ac43843f003f5ee555c606d56fc446bf842d20a54e52c6454 14ea20edf3733efc3d4809e4fc0ca37279ffd8c48c7107a598f2cf5d52d0d087 16470e7be2dd5cd6a75b85667f3f93184ffa8299bb547f412ca63324684e0c23 1a69ff58c44977b5fbfab5354e21e103c431e9ad04c6102ed1c333393bd4651a 1c0a8ab60132cd737b83b2c9b502dfb2d5e3cf14174cc84e422ca1d19277202b 1c281e80333d1924286e42d2a00030c717dc451d77ed71828a023f58ee60bab5 1d438d2f0ce5b32451c6c4338ddbda3d8f41da9861c648c5e5fdb0d6a5afb830 1f03866595c144381fec402626de159d0450ab2fed9d086649140cc5a00afd76 1fe22563292c4b3ab81f77fb867b917145ca9acafc50988c7408f55a502ea25c 240a8f1a4a7accd7ced57c70abdb3e8dd9b50d118ae439f01d02f94870b60cb7 241e2c41271e406153276044e759fb0d76a45d57ab1b7de8f84f354f6118d944 261ef08a7e7ec3dab002480216c5bf05620c20cf02ffa7ef060c43a01ef09054 2d76d05eb7bc53abf7dbfee0c1908c2a9e41b5a612ddef8404f26b303ce21559 2f7e6ff4d8f4733cf30f778fb11bdb44a628c4b173c88af88016404a0e8bc75a 30d687eb1581846c682bf40b91e58a744784c9c53d63d6170694f34c7392ae39 31d180b09759b8c6a97cc2d7b30cde3284b4754743c2ef138e9b5e294e8d2b74 3791b65b31a3b12f458e042509119c60c2b3abd4f40f4da81f7404b6fb7db268 3ce42d09b5cec400e0091337de94c9fc1741942fb8bacf46ef655a0567d8d872 3d767c19243f1af24dfb750fe7933d7cb4eecffcd45fef48551c63f989f0d63a 3ebb652081b17ab790ff964d9888098c435b14ef0a0686f630eb499d2a248e5f 3ec48484915f68da99e72184db1dffdf396d6a5f0fe0634e528b6d19a1b6cef2 44c278947a5769a4c05eef9d00edbf6d4cbd16113f0b9f37bbf7a98cdffc92c0 48965b3a4be70fbc5fa298c885f1207574db3bf024f67a21e6a4b869d4563fd2 494e1115bfbb0cadf7ac1e0e3d5813c36c0e2e829f8246a7856b34e9b2d100de 4f6033602c81dfccb2275257068ef3df35e4eaec0b4b270ea4bf2edd5f470cb0 4fcf6f2e7976e9ffee327c3d51457952436b73f64737d2321610d43fd169494b 512299f07ecced3de9ea7d4508b9b7bb53d51f0de6335ba44b8eb82d5fb6e41f 53d8e92e6c5eb5f71956fba529187c177d3ab7df6944a110cb74b574d9363284 5487471bcac7ac711c986fc37890e02c98a815afd8fe5692b47a5f06f860eb64 5a603e8341380261d57b30c37235630698b853b8798edd3969185a8d1040e14b 5ab047f04aec32260b6c22947a0f3c7e5c9bd55110bfadd10138704fd0fa750e 5bd64d2370e1f288da2e0909c9a6a20c715786c89d66e2b17a8cb3c44af7b109 5dc9ca1d97b58f287f91709f215dbaf4b5c4b40f2c49327207fc904dea950706 6233466a0b7c4e4875e74699942385e0caae248d6a38c49c6f40036cb07fe560 632582ec765e6fadef19ca1d01b06e9fc4cc94de1088dc320f0812af5f4771e3 6673e94490e966423bfaff0548c4cca16fbc1c43c50ca8c120c661740a781944 69262a3f4662b8f52bae3f922364565dca383a3a0d84ac13f18b445024df65e1 6a2d1b16463ae24ebb1ad19896792b7cbc6f0f3c06005ae0f98cb694a0fb803e 6a9cdde79098313e5a1274914da78ffec5d52dab8765efa34b5927c8a8eebdb8 6b5727c6490854539140bc2414d48fbed9e557ddc48b875ed80626d1f6d68988 6e318e8ce90aa6870494c2a448f8eab452552e4a406ec24d17ffa6bd4ced0f94 6e6e33747dbc7a7dc23361589ba6268c219082d3a84813226b769f3bace556fe 7158cb26fb5a843496b92e30c4366fdfa2b49cd8c59f280ee71e853a68ef0a69 72d6c4d11d02690b1571fdcf439f183b5dc399d6b20db50034d78cf77c9576a9 769386374d260df4f08e18d7142e3542d2844387b57a1f60d19b214ec77c6c78 781cf97025896c0aef788b6844587ca2b94602d68e50efea2abac50bbd066434 7943f6f2d61c7740064444908a89dcf669544f043b5451ca70b7ff5ba1b706ad 7afd4f1bd5e048035dc919579f5d1139de0a0d633719d6f846390a21cfde9879 7ef6b5688c94c6ecaadefac8a1cd59c7480ee1ce663a9a066f3035c6fa7183fe 81b12ce82fd3d5002b3501b1ae3b7b57bcd390ce8e7b43bae0fd82e241da38e6 83eed06c5ad62b940a596d834e2990bf5b90c4b8b9088325e55b2d5fcf5d1556 88edbee9de3e01aa9e80321633de368fbf17f571d59935f2af37b11e6d28ac86 8a4b6c293b3e644d0accea8c0b5f457a29651704e1c59a2455189545bff0a86e 8bac723a8fcc6449d83bc7b7153c35683b736df556395101c0d53e23f9a92fee 8c7d6dadeb5177d298dd7119286cec7d3994c8d8e5356ed6b1ac6823ed55b879 8cd30980778b93864b4345206c6135571eb74818cd27e1c4dbea9c5e53c4094a 8f6555ad602916d14787b8ed61e00545051c0540f1a49859e1495b5494e97aad 918c72432f644be772d0d1d47bb6c712866f78bfcd834de844142f5f88b05626 927d1614630382ca7d538af56c71382a068d8b2d9551c7dd5342449dde77b880 9288938c69b40fea5778b23491c87133233e78b9d044f218c35327febbd9f6a0 94530ce58a289fbba223ab50512183f2dc1003ab227b144d6ec21c15cc427cce 9513ae73d5e0ac80bea21ca6ef5019dfc4de0bb805943986209fcccef3b8bc90 971d2eefe9620f72d42307ac4e0a39c6fb117fd718c14efcb2a2f4f09b061a93 996adfd6ec5e61c6a4e3d6a96a14d36cd3ad57386546b7faa11b64b2c7409e63 99f6475ea8a760027ba655f48eb77057e4399f8f8d43920283a9ac7098b11032 9b9aa5bae1b265f96a53d4227ae14aca3c097ac661d277532c3d04603f9f6cb3
CloudScout: Evasive Panda scouting cloud services
Sources: ESET Published: Oct 28, 2024
Hashes in published Threat Report = 7
Variant Hashes found by Stairwell = 7
4bc492278cec28d408d9be697c8254e61b7f7ecf3b4ff0f4fa79de7937aa6f8b 562ff81f6ab63b52c256dfe04d578226abe1a689798ae01d078d35b6a41f3c09 7294b1ceb43381845e2c836737b81970db87d43ed3a5b6d65a252a496efb2f25 b9a14f62f6a84dc7bdfa518d6e41611e4301e913aca92a9e79462d47d8d5fe38 c6ca24fb3c263c98ee2e8f462aa204e9ed16842dbb84b3268ae41e7293ce5085 cb0dc8de21173a008aabba03547d42ea611b6af6880cc66f33e8e19bd9ef4020 cb28864cc932cea0986eb66ca61e55744f018da3ca751338bd0603c41b4d7389
Kazakhstan-associated YoroTrooper disguises origin of attacks as Azerbaijan
Sources: Talos Published: Oct 25, 2023
Hashes in published Threat Report = 24
Variant Hashes found by Stairwell = 130
000bc8baa9b06711dbab83953202b5abdc55f132ed14826b3face47e5e7cb350 00de3948f422d325cc10fd123da30fd435f162c3b61daf94426eae6e55c67e89 0439b352d96ff659cb9239a257ec85374fd69d061566624c9b63bda20e390b10 04a34516da0a418cc74e196640cf0da218d45dcd7ea47fe2f3beb34cf8904766 04b2631523480e336637889e1d7daba21ac66b1897457075269549030b3155cf 05da8696a4c192b9535e714915fb1d529dcd9cd4c7bc62de464949df80d3c6bb 05da969c6c17477cabf1b91c438dc2d59fcfc7a44a973555d25cfb1a50fffaa9 06c8c68b57ba588582428ddc66bb596f9d61cc2368d78957ef9f27dfa26f5a8b 0d0a784e4b7d2e23400174db328e147cb91bba311f2a4fdb95ad6a949ee326a8 0fb0cb8f0a8acce7baaee9932b3dd2f841d16b72bed29e217f7082433221fdd7 101a2964eedf7c44f06f8bd0985ccf8035aec652ec31851ff92dd12de65a0d73 1735ed46e659fd33423793310e8de4cd23fa905cab9868586b3688006e7a7ac8 1e0f5a3386a068d9caf87cf57e5a1c720873f9c040d7cdf96567cf797b18779a 21e19434678b12922409873ece91384028eca2c1a3ba8f45b85cd584f475972f 2213c800c24d374481ef44b30f61802bb6932b2a04f7c64f062c253320bd1026 25eb4dd3ae8af24d4af935125fe1c05b9ffbde87acd2bcbe4c8f3be82373df2a 26d8c134d3c0416405ca5307160ae47e349cf23a890ffaa4b5ab234ad1a5499a 2743d2a12cd292c695f46addc347ff9ffbe17bccad72c9b4e0c5114edfd80eac 277506b18bb2606c12e295973479de1b84151d4ff43bebce4ad1bdac1436b8ba 27c5bfdf9e42f9d80d0770d5426837f70d2e65c2c882f1a1265031787ecf9141 2c36bc4e56eb2a21e9520c20f82e8e2def62482fa512e87d3f8d6959494a0a8e 2d4bb24c274d63cc5f756bd698e8dc764d635908c438ecd37821cf97c79047a0 2d959c7574f62d201bd53dc11b2070f0ee8ad08594b7b30e3a0990ccbbd3f8fb 2e19cbdba91d519e9fb37457f56bcfbbeafea9a908cfab36f171f1d02896c1e2 2e5100b35f9db192e92277df23ea6539a50eaa110d18bec9d6b0ac0a0e67c0c4 30db69cb247cf13837bd652d0365657f66320c39742f108f6a2fe31349c7ae37 32183519841c8c32a694c134458dff3e2328474d2c5253ccd69fa08711295467 32df7eacd7010e8a5ed47de13c9a00a56cf0152852d8ecf4ce040786785fbe8a 34b9a0ce5d8d595bec7f59baac082cf30054bd37f7e1184c2d0e94f546be30ba 360ed32022c962ff7815f468eb4507aa23b26450f6617fd6fb5806967564e418 37ea346901544d4af07cfe5757701308559b889e3b43ffb058e350ba26507906 39c8538046224c8f5036ecf782a6327deeb7c4e431ce22337d07561942fd36a1 3bb54a13778ab814d1df98e3809a813bb7a161392723829ba7a20748dd0e2452 3dd66793a923bec00244a875c635c5f8e395f623256cedff21b2c9e0def46b99 3f28b48e6ba9749318bd1ee83381fe976053ce53183a67525d5bac7fee8d1c03 40b4c6ac42a966e7ae95489439dccb74611bdbde3a47270d9508a89860599aa8 4203750ecf7c630f1ac5cad996622f570a7f62ef8490ab9d2ad6c25ab79cafa5 42c5c7e6315687bd14725b4d17270f09339587fcdd3e96585943f58f48cb7bea 43b711f9cb1e56457722ed4bdcf46dc316a1e3afa9252b9db8fcb3ac47089005 445622be96a2e45391ae22e2064b571ea4a922087689ac5f2f4e468751f9013b 45375c282dbab3daa84a5557216cb9cf89dc2fdd89eb2024bc365e6f24403be0 4af466424534f2599219660f9280712fc6cdab0f8fadd33a37609de39d1a2002 4c2180eb380f6036d4d30aeb3604fb75f539933304475d6d7eae3645d9206dc6 4c4fee699787da6185876064da7087434dbf6ec37b6033ab262c2c72b7ab18a8 4c7e5aa9856480e41673e7ca57d76b0648de7914e0e1b5e0b25a4096406b991d 4dc1b86bdd3e2479753f533f09477cddcd87a704347cfb0af42f98c62064e5da 505909962b572ce762de8873c95e9802ee84c75109a9f7c3524391996cc78f60 5270d51e244a9fa7000b209a1299ffaf3f6ac12670e0e88ac4a6f37acce9cd4a 532506a85d952184afe0cacf8665b3d2abde364398a91241a25da323df4a0c32 5577d18b54433d58c4f8ee7fd0dd0961af2965003637dca4a6cad8f805c093ae 5b99ac0b202ac62e17f3db11666f0c7b9edea90471f18134fe93d00d1ef31b7e 64340a095707345c63b0f8e6faa080ee4475a2958a89510d51422fdfde238c3f 6455c69f4073379de2c6cdc65f5a5187a9134a30f597fa10b78c2990d7171bb3 663abd1c184ab046affe20b8383b0c62461df8b7acc05965427cc90cae82b416 68f5497cb22af80f84bb1f5b754d37d55ff8df729331821516d6284a3d6a3a0c 6b120f8746b777f16ce5f13f2a0b0e078772981ff7f37fa9e4af47335539e74b 6e21ecf6907d75b5175229bff0eef220cc33d39c0a4c17472934e9d31f2d88a1 6ee42d9d767046b832b13de44f9e89b7b21e19637c188b2aac0ce607838d887c 70948c0cfc46411be5ffae6bde213ea55745fd98ac7d1884a5cc0bc099ba31c5 71255e0a9c084e9571b22740e06167fc69183a63715a5be7ec86dc8f5de2f5a9 76da38029c0862524ead8a798924262e8ec15fc2ae3b3a5f986c63bb0f940d4f 77cdf2a1fcd03fd64009fedee611afd968204758576f175426788bb422c223bb 77e22621b70be4a55027552280be4f4d88e7db9e99021b169b2eeee42f9cf4d3 7a0b466ab8cfba76925d2a0d7000501ecdf278c58c102b2b3b247093d0e91263 7cd8b8a85150fb65f38f07d11d40081f4b4cee3f353c1976ffc46aa7b855db54 7e05a2ef644741ddaa9b5796be86120fa5e22d1a04a27b246a8b75ad32420c4c 7ef5c1cfb978db816211c6f01b093040eb5532a572494762cd47e3f8c0135a1a 844945c5fba18e052c20beb50c0428d019ad9130dc583ff21cb97fe7035a2422 862754ad05bee33a2d0e07e225aeb65eac3c876c69f4355faf7fc34291591a1c 8a9d8ed59da3ad281b2aca5ee0b3d8be8ed26b9b8b4f7681bbda332ddae1cb88 8aec267b018bfdb33fae3b008345fcb856cac5bdedbdbddf8cb1522ad15271af 8c18578ca5c866c187f13e3fa9a6f839379c090dca36b5bd6556b379f80ca2ee 8efdef4c4b176b8d11c11a64ebcb238d8fac48fbced96dbeb732255effd939f9 8f2a284d03fc5c6a40250cfada3fce2ba75829376268f0ad442755c872c0e14e 8ff56c3a34bd159f246670791da74dc1da8bb857cfeb1cf7f2d85978ac628bc5
LummaC2: Obfuscation Through Indirect Control Flow
Sources: Mandiant Published: Sep 25, 2024
Hashes in published Threat Report = 1
Variant Hashes found by Stairwell = 3
94c8fb631f919bd52d1d4341311325510d33aee6e976a75c940a38d88a4b7757 ab123c0c2203df9fc7995070e0721cd048f9273ebfe8675362df18ea6bf7a29e c829be0e78641329583de11672027a67cb3fc2ba31059e258a87001953b8f4ac
Eastern Asian Android Assault – FluHorse
Sources: Check Point Published: May 9, 2023
Hashes in published Threat Report = 8
Variant Hashes found by Stairwell = 11
1c96b946073ea8ad50906000a26fdfc7d12921c55422761d1dc053db6ac13258 1f400590738a58349ec900612f6ad52542bbb8240bb65fb1898a01dcf94c4f0e 3579b7557e9bf4bd552f99d42c1ee559827578cbcf5d1a4dc71fc371284ec433 3e723bc586125a76714997cdfbca1d700aebfd7201343b1986411ef3de39775c 7e99e287ad46ffc36c1a9f993f89a7839f381db7347c837a273ce3ad1c46ddee 9da7ba7cd20c86f2fc20d39991556ea40459a6729f07a416da0c9cd1e9c95823 a4295b86b10b0fbf6f7261c2d347dac548a68b28b7be18f1d5e8659f81c43e79 ab21cc31eeef8018a04813a123de6a643480d84c0dad0cd3b636ea3d36bc7c45 db1c04efbf19a54875c8f27c4584fb5c97e8e04f56af66a32efa4e6b985a3eaf dff11b36f42b17cfff72a1a62decf029d85ac0d3353170d16ec421cb52fbaa93 f18a783719e862680fdd7345f8541da702b253d3bdaa54228bb586fe7945bc51
Loki: a new private agent for the popular Mythic framework
Sources: SecureList Published: Sep 9, 2024
Hashes in published Threat Report = 5
Variant Hashes found by Stairwell = 102
02daf11602aafac7139d748c6defd9260032fd48ad6df6902da0087612f2c1f6 04b00ae9a7d60326deb05f5364787b6b14c451aee6cd7df81c21f931df31e46c 0567a028039e4e2c73bbdcc32d72a1728e6961f2ec2745ccd8ccbdc0c513ebf1 05d578523672b3d37b8b0cf166684dd80f7195636d5a98e616f643341f2ebb7c 065967e49550a1edc9b46a07e18f6eed263cbb68c0aa55d38e9adbbe9f5de27c 0aa361d2c7834405a8b338769486a882f4d1ea53d2c37a67e94c2c326626652b 0c6f3396894c82280587e7fe00baf598d34b7d442d722670ee00259393ec47ab 1512217e4add96a2224670bd62570bf3509ce4d4de8618c31d133f9dad608abb 1c56041812c05c134bc380961330e38053774cf08596846b66e9fdf848783400 1f88c71b8be17c194e026b3db1cfabd13514f31b40bed8567a030e137cb3ff11 20827a618d58ebd4e5c07822260a0e1431ca32ab4244d2ccc4b01fdf9e91aa1f 20999fe53d8bac94c0b514f5456aa1d248fafb14a0ce77864e475bb007edd92e 216e9544e88d61ee9419da5b5c77c9ea5b2d9e93df4ac3cb844d3c4c87ca297c 27a367db45de528a34bcc86d11a4d268272a4f7a099b52c94454f6249944adaf 2879d15ce1ff99bfed7be11658c81a98599b9361cb2b163647506bed6ebc5b11 2a3d500e6ad9c96fc55f57e8571d51ab639ca626997f348c0d21db23389a3df3 2db523be62348a5164d77011779967d59ef95ff687f3c6a73c77e4a8c51dca3c 2f21cd4e1ab4d0a47309f777b7f62a0452397ae57fb986b8024bf038c83889a8 324bbdb99c6b0e20c4bf0a39ec2533aadb91470019d3791d122e47e3ba34e51c 325a3d30d5b107e984f993ec90c8924cc881f3abbb33f8bfda2547829e6b595d 35f508d5d1a4504e9322ec1e59f9b06c07116f9a5289f930615d1ef5332354d1 365a75778135f8e920703b9e43cd87fec08b796426eb2a58f305acfc14174cf3 3726c49469d25edcc354bc40741e3437c82fb47086a3ceebb8c47d2b218236af 381ee7d10a2d3dc531ab5fbb176f1ae31f97172a112deafcdf3422a8ac724d41 3f5afa9e085760569f0a62fafd3d4797c2954fef1a5e227fc9c7b4ba044909ba 41594365ddb8e39b99e75bdc8acb9874fb343c12ebbcdb197c0caf511a31f04f 44e03f600d6a5c3b5e082466f604d25fda614a6b376d4205b9dedc8b7a4707f3 47c6082ac04c9a2cf9a432f3c25ade7b08f117f3b53432812333a1e5c30f9614 4d39984a4936323b602000134e7399b8f4ddfa698d4b53517271258fcda09090 4e28f7cbeded33cef9de9310df189e9e190d41b7daeebc8b9cc6e4c8ce2390cb 4ed7b20bdc69a1245f7b7df523c6ec1a5cea355f0099f0bbd5eafe689a713706 50da4389ed7982e47bc34a51d85dde37e65a20bbf96517c6b7a13b0eee806530 51ae17e7708045a6db20416b2b4be190c007b52227eccf5875993c421768a809 60585d9c7ca09531bdd0b4df2cacf6406df9375b001d63a0dfe9bd770d2f700c 64e0322e3bec6fb9fa730b7a14106e1e59fa186096f9a8d433a5324eb6853e01 6a7134820f09685d50a431eeb17f59e21c1839a1d076112a92e9022adae71270 6ad94ee370fb4af1a8fbb109547a0920674099581477f2876751874ea1623ad0 6db0af073a0dc9f26935faa8f728e016161aff6cd6d42fabc707528e182f141e 7063a2212405c1ba85d5ad15b6b1fead6671ffd71f02a58b3e5ff1e4f56f3e1f 714c29444b19faf614f1189f2c224ffc3bba7d0f328ad0f62b996f998a1adecc 761e1f3c928d8064cb495b72de9d0edf38d7de51ae25dc2363d94ed6f2135765 773fa1c648fee9dad1f500e10c81293af4cde4d5fd2bfd15d07c31583bd60c69 7af4fcfdf92d4f7b3eb78070e86cd8486ba556f9a3255a5c121c4fcbb73591a7 80d5ea4de774ad7f579d7381a492b6531c1d83c2a0476d236bd87b1aaaac3c7e 80e1d518dbd269c8b10f2bad9ed89ce4fd615bba3a35841f392ff5210e2c0d95 83d92627f0d24573dc4d75b07b8e55fec640525e47484ce3e837d8d82a653b0b 8610464e4cacc238b96bccee36539bfeb52e4de68a3ddd7e022f57fba6111a60 88f0a6bc797e68699b6318cfc45d63ac8d0d00160e21ea3c4cad5d7b4c15a519 8a878d4c2dff7ae0ec4f20c9ddbbe40b1d6c801d07b9db04597e46b852ea2dc5 8c5f7930a6a65715cc2cdc81976d9a5b72aa173e39794f40eda8428c0a4002aa 8e841bfd861161316a55ec1550c480bc41bcb952234393f65bde7064e4727ada 8f2f389efec78b606ad887a9ebbea508b6f48301519aa350b0a230f5f36c7bcb 9053f5078a837688a765f272daa61688678ff3451700b36b2bcc1eb325aef420 94bfd6720e009f9697bf995e9cec50d29081ee54c7e9195416f6876c5006b024 9632d7e4a87ec12fdd05ed3532f7564526016b78972b2cd49a610354d672523c 96e581700247be1d88e6a5a748fd1553bd35707d366210789ca4dc206ebe5ed4 9923073eed74663b30f45687e0af8d110eb83a812db995215e34cc7c457b5742 99d05a968501738a3ac6c6155ebd92361ce03cce5a6de3932c4793f06f3c2f81 9ae78ed7542a4da6ec05393da16b5636fce841e35efd18d542f063ae78edc25b 9d3742307a42a1c3b8f60c08971a0fbd60683a425e3e054a1523d3bec44143e0 9da1f76a57bbe502f258c6aeddbf03812ba6881570276252fb3dadc7b477eea9 a08b4a527e516e6bda5572e10ef426e1164e8c172266882829b9ad3a9ec8eb73 a09b614f0e66fc886d7166c2c7c46dc1f1e2b3987d89bf76bc4a9a23d473621e a1a26778656c5215ab1d939ebd9088827f69923ecf53a503b04bb504fdb97752 a297d317158530451642bbd8b6b118eaa886bc311e95a24d8677ce76748fa5ad a5e004f29724ecbb915fe34d8e43162fe356f86fec57f39b961ff9d2dcb807ba a7a0f8b30c4f7c305f09abc39cea0893fcb213e3bce04a6629a72fb610a140a9 aa4fcb7168071c1a83e4ce8178f08a6c6f6ac93a1b9f38ef56a5f0c38a00f14d aa59ac0e237c3c71b03c206ce3b65c749105ae9d29faadc7ebabc978a704a8e7 aaaeabaa2cc8dd7ef7fb3b3319ef9ad26f9533cb0cf8c5ec184f973005aa934d aaf01c75d50ab70085a35f02f7a0d60efe6df683059e610fa50485c0b2436123 ac8650b0fa158922ce73f144df11b5d00d03a651123cf9ed94177ee4550fd847 b3ed22f21ffb603a67c9ce8a36b893981ad74206429632f3e96ff9e9e082fd7c b802f7d7cb68b02a8633dc1d5c4dd3fd154f0f03462a7a03abd9c97661962465 b81306a34df4051d9c31cd498ca92134be4bcdda5ef7e35335bfc9cd816b5129
Russian Military Cyber Actors Target US and Global Critical Infrastructure
Sources: CISA Published: Sep 4, 2024
Hashes in published Threat Report = 29
Variant Hashes found by Stairwell = 73
0252a16fcb36052d76527141752a85910d39e6e4550e03ed350c63c5ff870da8 04ef0bad2badd8dc790ee4d623f71effc3295d7fd91be7d493f8b488ac0faf43 05a7cfd080cf23d9515829e5c99308d963ac4490cab284afe559a2bdd3eaa6a3 080a59bd0dd6097fcdfd62e23db8239d1e64fd9ac6b68c82a405cebb43949048 08a3ba695cc3fdd1e563d57a7e6bb8eecd95141f0d20e2d07516350788f796f8 09ed80909a5a6dc7dffc2e8f9cd6c21fb1dc98231d99e352aca5c53a7ab51278 0f5c05b3b6cbefb87177ced1943c64cdc6f5ceecb159f052055284371d3856f3 125027649baa986137fcc64ef094d2f88783d8cafed938007f23e80ceacb2e9b 191ca4833351e2e82cb080a42c4848cfbc4b1f3e97250f2700eff4e97cf72019 19608137ad11c2de18358907c032be4334cf5e4f3b4fe79e37d80bf607027c92 1a58553e818d255d0ba2937f8266b39c151ce0ec99351ff9b7135a0f37fb3c74 1d776e7fb062e153d3a62e1ebe1f2eec30ea13fa4b1b8749935f1856be4182d9 21c7eb7a235ed1cea45707c5ed3929808eb6c031a2f894e1d1dce453394d6917 25f12654131bf084b81fa5454f33bcf248f208eb5c7679b94995f35c982d4980 2cc4276af6f05016d2bd3377583061574ccc64732dcb0acd31de6eec5ef1c716 3122a531c7f7f5bd4048ea60a95de56397596e7af80b667837c4991f93ec9403 3931cc4cdda8101f09ffd51b7e0000381046dcf75cd45407d2cce8bef0604d99 3aaf3935cd5a5adf40b156837a9a54a3eac6da9fabcc5196044029628f239fb4 3f477eba5e26b0dfef21f7a08a9c51ddea7cc038e99d8d0075544d65c86c3f7d 4015fe8365365b190113685777ee2fefafbb862754d31b6f6bc4a7930bf1bd80 445804416c74cde27b504a6c070bd9b62e53e4b604f101e2fcf8f51b437b3bdb 4746386b6ec091726ca8e6dd37a41da97a70c8ee047e6992c1e61532bb33efee 48b6f61e37bef66ece1cb50e0c137e2a6d8aef5a2828b910497332377e982a03 4a8dd354270640e1f224c81a20ef8fe72cb21c70497b1226a189ab89a38421e0 4c0f83c722bdcb38b3d53a1cebc80b777ee6e02742e27a384ac39d7e51f4e7dd 51a04fa085054da662af6eea62d8b76fcbd65ad5a4a13d99d4a8e0f3c400e2da 5f48e99d2dd11b74f50c78f2a0afdd75e5379cf3efdfad1a0c7dc49c8ff3d97d 67a7dc6405acc9887da45e7b5d57413157519265650fa6749b1b2c8c0a8f3d11 6a449dae4176ea6084ebc81de44a872fd575183cbc086616e208b25efbd766b0 6b0497d0ba05c5e95f92d5f340fddc08bd86af9b4a2a3abe533b963234346c31 6d13d6b01c04ef467b6c4b7937b4d7af86aefbeb4d4dddfd3fee6c7359054fff 71f8e8e837b43a06711634b5f803d7e0638a71c33143f71c80815ad3d2251e07 758fccd9a051b0a03998a947dbd3c76744cf941a84e4e525a4eaa46425616dfb 7e5748fa87daf63e939c132a518a7db9e99d0782fa08ced8cc22cb0e60f8a192 80715769e383ae6ed3b425cc816ca83d9815b8a9c770ab511c5a2a88d8ac222c 880871738fc4ba3dcb2476bfa5694c4d8e75a21a3ec9520b4b66fa8c5cbccc62 8ee0a15acdc267487a8781a279364608c00a86ff4b0cfea3d84cb7829bce1239 9164c21eefdda3af1a62fccfc6f650933304280e924f3f8671b39293cbbfc643 9381d42ad937d457ff367bccadfc4ff60584d1cc42b83aad69c02a850f6222c7 95d42362e7ab27db32203ee7adc280f46132001a43307a7256f18c68302ff2aa 99ae1fe4bdc71efe9949d8232ec7856b4420c652de72bbbeda68c5588b6f2ec0 99cf2212c92c9a1f6e5d18d8e182a238a5c30015fc1e21cbc6fbb235bc2e954f 9c7145a7ff72d57a75fbb470dd25087bb9733f82d5f4d6afa2b67346b24cb32b 9fc4a8a3b82ca7cc67d3b4eed5450d9c6ff148924beec86be1b3178754f4b645 a3e32b35c39be2c16d2216aba33a2790f1e4e6caf2e2cbc3428e330e19c49170 a595439940b11940853825ddf43344811178e9504346e5d88911eb407c8fbed3 a69cb6986d05575904e2d602830e8818f925b27d90b1fa15b16dbdb9faa93175 a76e187ce9da33193aabc36fe359d08754d754406a3d724cbc38f686d2ebfa1b aa01548768faf50b429dd7a0b5ef465b8d609676046a390bb0aa714b3e8079c5 b2f3193b3ec6e146d13bc07ba0592c22c2db6b87daed94a3ecbf7792761cd97d b50fb20396458aec55216cc9f5212162b3459bc769a38e050d4d8c22649888ae b81d6f435c4d6433487fba17fe4a3a9dff1d354669dff6a755decb9609e99706 b8200b31b3ad037187e223166d66c2d553b5fafcc8a3a0e968de2dbc0714d1d5 c7d4abc92f6a664f83301feea8c6dc31a5990ce69c802f18a8ff0b7b2eb6a3c8 c7d6aae30b00c69971c3958757f56b7621de7e78c61897d5ecc222aa6dd37636 cac89f6bdb08f8f49f98222f100bb3a4936242e045dee6c6477b9782798a12b6 ccbba36977a9d5142c07cc578419a2f0a29cd63fe81c8fe45e21d4f2bdfff4c5 d043766ab9a2b503bd476ce03487e85115740f6852583b85efbf7eefe0e7bffe d77db62d33e6089167940270f0f443490755fe80b8b300c0e4564ae6539ec9ad da01f89405db87421fe32403519447113f1e22162e406eac5777bc44715379f3 da7315de2d8f92beb4a421e25d9ca2ff25f05b54d66591e77041b333727b0fae dd37b3160b7b8be8f295cd7e670b131a280591174cf268205b3e9afcbb298605 e1805609ff5feb5c0fa4e7c2e054d7d3ad59700887b17d479717720a0e5acd43 e197addd0252e59199a53e67146134e073c97e2a7d93655e44aae04eb747a79e e6b0f77203861e2783c479b88b8b4ca095926882f217e085c87c83d995e9eb07 eb9ea3e6e158c50c05cd661193a7624230b564ae480a7bc6b67b0bc79d1e06ac f2256a494e0f9e39b06cccf501a6541431d715c3d00e9fa9c59371fc7795ad70 f23368327f6a5fd37bb5a90d28002999994746b394e47a2cbf98b3ba405895c0 f835cc9ddd4d73857f0e1b37d7fd6254f428de2a5e91acfff3cc42cec8630100 f851930fb7db8b146fc1429d2d5d30d3fdaeed61adf090e551a10e3aa9ff756e f9b3c37a66fa831d6b52db392f2b8045d0bcf14d3701e2d4d7d34bc0ab314f7c fb793081dbad4d179c7482a31d06eb45658d74953caa012a6bc68d69b6a72eec fef2fb50640e988a7a27308d2de36be46e9058e19cf6c639b1c4bda8facee214
Rhadamanthys v0.5.0 – a deep dive into the stealer’s components
Sources: Check Point Published: Dec 14, 2023
Hashes in published Threat Report = 2
Variant Hashes found by Stairwell = 29
00088c91c95e5b7671cbec59a692ef405eb0b17110c66380941f56eed13232b4 016f10a7ad383bf8983d728c4f507dab9cb63c9093773791b07f63f6eea2f096 05074675b07feb8e7556c5af449f5e677e0fabfb09b135971afbb11743bf3165 061554b4df4eea3f0b7882ab554d8a28722be850ff7c1e1eeb3762021be3c501 0c906aaadbb2ee2ee6424acf035773ebf5b1f0c168f513a684d3ddce4c9f979f 278feeefbcc8e0dcaa8a0d691e1f07b767ccdd3972b8f0460dccb680f90a7bd2 27d98e91c4e9fb55f9c4aa8efca637b23562e9c113afe939319cb74329cb8ffc 2c757ee617fcf531e132b0d0c64f2acfd542270da1dfe644b517d7a4b3515f2c 330195b856cd37703a93408539e46c6fbfc764f7a33e6473d1e2f061a66b43c0 3a4647c9b4332f7f115cf11a2d2f79ccbc5d9bfe3fb57499486b1164ca5c330b 4c052c3eb671f19c01f611d528ae8bbde122978cc5fe0f149e598e91402fd070 4f341c1628682704c39f9903c0c4eb2238c5dc06908ec80956fccaf97481a488 56e6920b721c6842bb4a1185539a0a810e6bc89233b48e2106fcacebf81de729 5773216e3a9c0120fb5b08108b22ca4e175b2d4aa66107e33e72c95e283e8280 667098b52f72700223cc912e1ac111e2423ee12560f71d67b3d8db889fe83293 68e52278a6bb8ab2aa7d4a9418db2ecda41b036d7d97a1560a7a68db3cc6707b 82a6847b83bf25cb582bb942735a32197bd9b7b490ce50f34c4976005f4f9bed 99bd6ee7da4edad447fba55a6b11538927013586ef617e70a0ff4765adae22db 9c12f74482ddf58c3d6906f634bd0ccc16ab106d15c22fcaf6055c8d309b93d1 a5633bfa43c7dd02eb5937be894142ff1e4129c16bcdacb35ec214bc4f83b6ed a56744937c5bfd88cb85aec3a23a86f3c7f1e10d7625b2d351dcc7956ab7466a aa6a20b765f997a259776ce30456a76b3aa1c35bc6246644b3f79adfa6b3105a b03419e0734c3a767a8a9985e9e00f0b95de57c4ebbf3a83e4a4ad734471f727 b0caf8efb1401469a12be91f3c73d92066a4b87c0dfeaefce127c8a1b3757922 c95213d3076cfb104324fb0ede1010a8188556802a832903cf0f7d3f0c36f6a3 dd76fb8edaa8a7e87b23b8ddfc536bf861528f09db112762862f02207f95bd8b ed1c18f24a1b948c6e574ac9f318dfbdf747a30dc7c140e8fef1dab4e20a978c f3cb3c01e4fd4b6d0ed7d36e35f865c5f42a81870a6a2eeca49a7f3d249f19dc f4c09b9c26f7158ea0fdb226ab7eac8dc51764515eafa4099e263eb2519b3168
Windows Remote Desktop Protocol: Remote to Rogue
Sources: Google Published: Apr 7, 2025
Hashes in published Threat Report = 2
Variant Hashes found by Stairwell = 31
0939c9d5768c6dc93965834ccfc681baf55a67e7e81e3b92babb9c37b2b8cc80 0aa816f89857ce18ff2374a3847a672f84da32a1737ee80fe65f916501558b0b 0d1052726f5eed7e9d43e370579cf73a9115fb5f38d730351b8c78d99247ac8c 145418b54b280f6830716dd9aa85609e0ffa204bc18b298bd039a960c77cd599 1a18fd59f782cdfd0098ac36fd698de3caff74a047ded504606780c0463eb295 1b96321038011433e3bf26d9f03f0c95d3aa4fc3ab8698b951fc0c1b412d7ab7 2338cd256bb9ca4ebcfef70c48cc239df172ed7eb8efb3b57bb76783c3144448 2ad6c0c4a06909b096b91fdf4dac88d880fad3680ffd7a9a9511634a9ac461e5 2b2ab9690802211f7759cabbaa3b087bbd8e178f0b1bf32262d6ae5718cc5aec 2b3ff8d3634657a73a07dd1ed3c7e47596583e171af8efddc4435954e4168054 2bf3bb9d991c80b9acacb3e0dc75ff4344fb676a727314c817530a1169953a18 449c3302866665601090488713b44fb744cdea35e4e4e71db1fab6a2752b607e 50bed47064e4ecd01c4a9271e63af7cfdf52ea4096f205470e41eef7eb01c1e1 56d65cc11a94ef0cb468a81dca687d719ec2aedb739eeae8c69f1083afbdc1c5 5e82798b1591ebada9b7c95b4c835e5fd1757183e5a8453d68b3725047a1ccbb 6d43cf286ccbfa36baf528859fb68c349a6917c8191e309a41c9cf72d297d057 86129fb4b39a6d92a382b501eba4ac39555481b746ed7b0e97dc117119e41a37 8b45f5a173e8e18b0d5c544f9221d7a1759847c28e62a25210ad8265f07e96d5 8d44e44fd61f6a53d52c13de81a0e9422a70c5bec4d1cd6899618e772ab6fe4f a246253fab152deac89b895a7c1bca76498b4aa044c907559c15109c1187a448 a35151ff14e32b5ecbbe9a7a38619e435311ccc3c1e37ca20291276106fcfd59 af686f0e3ae8b1ecf38a66c81cdde7723a5474caf77e54d218aa1b28c62c8ded ba7be37bd36a4ea3684aad60d8c24c1f0e42d4741e7d41364383d548f3964865 c4957a7a66f0059d13d11feb82e0ad0efdb28cfbbe56064098473de84123918b d9bbb5a59e8c888e8ef2e6fdba9ecf31d62ca2e740ca0201be0bb3754381d986 d9c51628db36f2842b678badccd5b14b333445619f24a75adf7c05c509b3c556 dde0965ed4d337ea4e87ae1ff939aae41439132a22c784ac7cac1f6276b7bd04 efc185a7f2a1a1a780d4bd19d242cbdb020350782e5e71cb01b01affcb0e0abf f0603659c438ab08a30c1b34de0512794c2c739c310f049dd87331cfd4b742c8 f357d26265a59e9c356be5a8ddb8d6533d1de222aae969c2ad4dc9c40863bfe8 fd4c4a1d0302f84dc3295d24ca8056f896f263e447b083a5946ce2ba3d72718f
Medusa Ransomware Turning Your Files into Stone
Sources: Unit 42 Published: Jan 11, 2024
Hashes in published Threat Report = 5
Variant Hashes found by Stairwell = 24
0065b818525d8a364f5d9e4b801e3408dad6576ce6d8ca5c01b19c3857a08d64 0382f4930cb892b43c80ef147ad617c332a7c2e298502ef0e6663b2b48319460 08b74bb2d6ec9bbdabdd92fb32d8322d2e08b45b0be069c7429675d33d5060c7 19b65ef538144e873271f547807830a5ba31fe215f2fe7ade51a38047a80834b 1bad2b6e8ab16c5a692b2d05f68f7924a73a5818ddf3a9678ca8caab3568a78e 2e62a782c84149953dd216d96fec8e0f4d4b568525bbaa0574b1aad2530d28e0 33ef66ec811267739a975c776b75787e819a26761e232f0b3eb4b32e7ef560d8 3581f1c9ee74f83d3d476aa5a947a040d9f2613a836232180c195f678b64dee6 3a6d5694eec724726efa3327a50fad3efdc623c08d647b51e51cd578bddda3da 3d091b32abd008ff392158ff4d7271f72febe6069b4b1b3ccd51a2a733e37327 3e19d1653c08206c55e1f835bd890b067b652b99a7b38bad4d78ad7490c6a0f8 44d615a792f73ed5620217ed02b0ee085c3ae5f12112abdb3b4bc3fcc64702be 49916c9c2a9d6b3c60f541891966bfff62e9b3eb9b682ced8600e7e9415b033d 4a0e7565db16ed833a083bc9927f032be5e6918eed712982cd76e87e99510778 6b807f9f7c8f24f436b0bab25cb38583bf4c051ea779fcdbb215af8a9a7f64de 83f2efc9c0483c23d9ce35c309b2b718b7042412e3f85fdf8b73535e31b9ac09 91a3b832564a9b29685b393c8bda9925a7da87fd3958625980da06f80f76109d 94f420e16a4eb5154076895cd8c5f677db4273d37d44b81e1d04b26e851b69fe 9ec6bf1ad038e6c7f5bf9be374d3299df033424ef1399a8ffd892df40efd6353 a0cebcc9f5893b2fde2806794c27b8a304a0eb863e128ad779ed5dd806ad9239 b091e38b4cdf341c2733c6e8c2199afd4ee05fc9f921a37c8e555198f1ec2e12 bcd952d2995d187c5a87ec0e03b638e02d7157b9a01d4e7c28ce7a6d6b28ac42 c9abfc3e4da474e18795f5261f77e60c44e7b3353771281e4304e7506d56fdb4 df0f05469702bd70c49045dcbbefc65e735f4116bdb12526cd16110472a51dc8
Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware
Sources: Unit 42 Published: Oct 9, 2024
Hashes in published Threat Report = 27
Variant Hashes found by Stairwell = 52
0046ad625564f42b9dd69f3479732b3e1aaf5ef3e365f4752006e703963dd3de 0b94350da085d818c6a7095ebd73c88c12462c85bfc15438312153b17914649c 0d8119f01d727beacbe6fe877541b3c11b084ffdc53c8bae436aca3dbc197076 1167a1170327ecb6ce96b0c8476c00a49a6eb6377a3563abdc01395106af5208 16458d1f017b78f4731e210b896f18cf0173f24143152a8b2ffc925d22e603ab 19b67368dc4b268a2592f7dd87ac6b517152bd944f6c9031e0cf7092864b87a9 1fa62f29313e55ee1bca18820d2f1ca3aaecf438a137a67106d413c655004f0e 28afeecb07f74ffc73f919879dcc42cea2aa497866a3313885c68125b16b38df 29b9e90cd9b3438dee2bf98bb9e117cf801e6ad2d45268e47d6a8082c64550e1 37862d324bf67b2f36c1dafe7e1775c9563539cf7c51c6cd251c9ce5de60dbfe 40b9fa3aff84a8423e289f3ff118ffc9897c4c82348e49f7be9384d98787d5ce 41053638ddfffefa2608f72a8ed44a82d55640c4a03ea256e1f78f1436830a9c 487374e2bcb6aece02a8adfa39c610f2ff31520601ce8a45adef5f6bd3fb07d9 506e4afb0951a56fa516817ce3827ab6537d1779a027be6bdeb3cfd2b7e5ec76 58f4c0cb678c58fd5737162ea3b9d6c20e5fc06dc30f8b6f7e4a2a17075df3c6 65b07efaf51f4a4890320bf0f3c1d6b3fde30a001837b29137179ece11689b26 6d5709c188c565b719a9229488ed43b56ba69138e95f048de7023cb508105051 70324215847c4beb56f38c2f222943c2781332dad413e5283934c2d9983e59c5 713fdadfe2d15d2020eebb6db9328b1f6a4f7a7e4eb85236f93183408f99a75d 790b48fa14c6ac3e95748b48f19f2b00208818fece5361fc39a084834ed1085f 813f754d5107dfe21b28d900a34d3048e6d2bfa126733b3d2f4a9eaca24ab8be 849bcd957ee19bed5a1cd19cb5a6409f8c1f296e5d86bb419b13353e80572360 85b369d69cd1ebcae22f040add78a6c3a332d0041ff56f47ba82c19f1f156b65 88ae4913ef8c22d4e3c0af3eeae1dbf19221fead3c5156121e8a7cb8942578af 8a016f3a470906ae41db7bceb5b5e93ee835946697cf13a9c559d54525b094c8 91f96f2ddfa293806ec3effb8e05bc6941660237de90215b23281d706a2bc706 9556b46ac83e7084681bfe073185e9e9a062ecc4c9a8d1b092790875287bf62c a6886683c0b01ec262bfa8d3a2a32ad1b61c2ec3d3f1938b7595ef9e42c20760 a6faea343b069ecc37f31392f36a533c6277530c6aabab90c6dedbd7429ecde1 ad01f2bbc88190d26130fda23b1f3870880312d4fd44e833d00ded5c69b41d88 bc51cb755f6ce4496980da844443ec3a87d5df9891e1af3a373eefb247924be2 be2d65a2ddcc21a7dadfdd30d4d63c2bf62cd48118c701708fc5b23f9e2586f8 c0110cb21ae0e7fb5dec83ca90db9e250b47a394662810f230eb621b0728aa97 c378e4a8dfd3db4423bfffb17e00a535e36be17cbb35e9456d3a1b17ce7ee027 c5cb7bd61529ffda811690b24549456f5877c13ec1e3a50bb094c8ad2ef8bda6 c7474b68b452c82f2c11437b7652dd4a6419c11f08bb3f3a97dfcaead2aeb858 d141bc9b5664a906ec501781edf7b7af2f8640b067fd90c7f36876cba764807b d16cb03c26f70fb1e95d3ac9c719122e6270d040b748594559a2fc5ca7761add d75f3125d2858c9094d85f66385d0f0b29ab67311799ea30db366087a786c168 d8680d9f59950fe7a4a3ded4151f716eaefaf0dcd2698a7b310ded71b386d3ac e278c4ce20ab8cc65790b056914cb1a5ed22df7209c3cd6a9c3de7f3bf0b2aad e71397bba770bfd39787948560ae0ced296d98138cf5c482718969f579e45dc8 e93f2f24718711ddd7751b40cdfcd92814388a65015d1a1e8bc1b1885ada5fca ec6efd21382cdfca5b193744b7291f5c564ab371223a42658d35fd01185ceb1b ee2815f073c44a6006c1b7604f0c2367cb09eae84d1f764758069877afb77fbc efe7f5038c777ef1c631e4c3d9173d0c49d5838bfd9a5a22be1f43e0a4d4f817 f3d173ab5408029e92906b8a71474a6f32722d09a89a53b977b5c40ac6e8805c f3ee170e49f5d5f45deed1feb7b232fef99ce4d9c172b528953fd3d19ddbe043 f6d62164a8001d34038d179bfbb1ec2c69e8228dfd39e2661f74cecafaeeb00e f9cadd0efbe85f594411eed719e5597ca85227e5b69a3d9e2acd4d03407195b1 fbcfc1caf2c90e4e445ee08a911b4df8fa8dec54794eb2d85680dea1b6407f68 fc15b9857500c1912a6e76cde6c58b3cee731779f6def492e236d1d9d0475830
Mystic Stealer: The New Kid on the Block
Sources: InQuest Published: Jun 22, 2023
Hashes in published Threat Report = 10
Variant Hashes found by Stairwell = 51
00fe26cfe465740e61b99f105bcf2516ff49e117f23f4b508d5256c57fa3fc66 01232ce60eeacb971b0e1fea8cff8e47d7525d83db2890b30304d90289c9c936 029c5c11eb39b1d069a31167944ff7ac3af29004164f2313c74681e2e0fb1c7d 06fc27590235eda93d3a697f9409bc657bec1f078d51731501035533ee08cff2 07e1fd39567b7c95a515432aa13cf81fc079c53266580400f01095d5ccde4762 1480063e9d9d2c4359c5991471e1266e4501aea041eae1f32482eaa23b8f267b 1976f4a6674646105835d4dda3abbea008fe75a54c124e2e87443d192124cc94 2288bb59c2903021689a11398a0015be01e2f673fdfd022e131e9bb60bc27d95 2961befeba236483bfb5c47dfa303ea81caaf384a13777fbeba331ed29d38c3d 2a83c9135c3766957c7376482f70d5e4ca20e15fe855f695c73b70480c627e02 2b7de54db8d49966b738ff557678fe1c41bdb36fb8dcb6cf2458afbed5c0f3d4 39d3532ffb7565aa79bd6ae6f510ecc7ac29ed7cd0a98a7b948c10162c5c25c0 3da588d8005d865d93e1cac4934e78a75dbc7012c0bf3e9e245d553bf395cf9d 4091b3b23039b40e91520d4a24f53420d4c33a572ee7150f5187c5ba9e4e7658 43df72fd878daad23b382f8ee7f35586fc735a09e1f96febff2e98c4acc022cf 4a81addbf8b17002e8064e11b52ad78df78372f0d56566239a399d9256218f9b 4c37b90d1c1ebeb086395ff96dadab13a93057e0168cdd622c0cd981d7e7982a 518cfaec20ede057d84701d48134febf5b817336916c245adcd7d6392c04f2a8 57b7d7a5a1a471bbb7ca5883625bf517fb65f688504c0bcd8528aa00bafdbce6 60419c92be0fe9d32638087655d5115e0570748ed395c83550663d81c11054b1 6540cea747ad3a8747d356a8258e32ab78600097447ba36be9d852b40027f70a 686e64fc989a15ef7bf2115c4e177b1f3f1f877fb8f3b0caa05d428cd7960e1e 715d1bb85f72b1207be8c9ba3e553a69d35b6e77c08aa1ffe5e45f99c3304131 7a9688b68fad5a342d6466a61f10df068126418107182f30860d913516e3aa43 7ac6d5aec2c959e1546458adaac6f880650ae1ffdf95491cf6a5b25514eb371c 7ad7859f7fcddad29d94927cda3a544030437e3a0315302f220ca120e73becf5 837b98e2e2fe0a3234001c5db343fe4c7209d4e0aec2938876200fd26565d58f 84d9f9f75586da792abdb60c0e9f67e73ff90a3963cfea235cc86d330af0c1d2 8a2a8527482c7babe9a6b92030bcfe3608d4d7697a4ecec14341435bfb7b5b7a 9948778f27092f705518e611614e0eec10604306cafda431a364eb4e775272b2 a444dbdf51bb0cc8aec764aaa12398f32212911830352ddb160324505dc3a4f9 ab402a53a095514c98fa6624960df79ed5736ad933ed791da096523204da94b3 b0ca25e7031226e857231009a5bce06e78627a6966b9403213b54b6ba877ddc9 b17abdeeef2d5b00af02b416c34994905980ecc1f9603e2ec086969f614da98c b209c308e368486d3c21beca0680374819ef055f6a90c290efb5e1703793a308 b3844b99498edf0bece46f8e997e5c08a96abdb49afd3267bae3cdb9f1ad2fd5 b3955a8cac02be8d6997303722870dd7b64c97b57200c8ccbc80405b333c7962 cba6c2ed3584eee0a42d4916ea0b04ea10c7f377703400f3bf4d3941336108f5 cf853084a50682b5062b7dfd145e1b66dee72c65451291d196eeefc06936d234 db165e0807a2dd7576d854a20baad0c65c810f809aaa0be940acc2b6860145cd e186b5b490f9abe2d113d1a2cdfcee7fc88850d1c9c214ab3ebe23d3f8c24396 e3a042e1b3c9cca7fd996684c56f1460e6172edb5a652f7fea1e93e4facc6d9b e4f69bc279e734da4c749ac53620ad3e5a9da25bce30d5dc9c240faaf8f1b16f e9b7c7b03d379e1399e3611040fc5c5a0af3085d438689fd468acda5fdd6bf54 eeafad325c35e85dbe694969a2cad3f30d33e7b640749e2617ec3faa3eb4efc3 efdcb0067912e9a254be5c3d6f6d7fec22df943209ed0cc093aa8c788792390b f0a11a50332cf17fa12b5dad9737833350c93dd073e6e9e980ca613526c8639c f6b88f24f5bc4857ee70a045c9544d1c2bb0690f446dff9dfe81f0a91a40d928 fc7796bc6414f4667d87a9e4f003754c9e335c161e85a8960693002da013a8c7 fe913dabf87229b07f2e2cc2c71b150d08904c25b831f8ffa3aa9811160657b8 fff6dc0538566294c62cee97874442e2d848f3f7ab28d7a5f84eacab47076f94
APT45: North Korea’s Digital Military Machine
Sources: Google Published: Jul 26, 2024
Hashes in published Threat Report = 31
Variant Hashes found by Stairwell = 241
000752074544950ae9020a35ccd77de277f1cd5026b4b9559279dc3b86965eee 0019a566a81afa01f02fdbac99efe73e0dc2812deda5d285951a8452c1eda30d 03b9378b4ab9711d69a10151b1a82a88018d2f910a9111243f1abadfb6a8f7c5 03c569c3a618a9450db8a0e4b354735c95259c79cdc8ddbbb0440e0b4e407821 03f8b2f1905a89d1f9b9a4b850ca832536caa8860f9d94b619d25105ae475eaa 07580be192f2abaf9226c429c2cf005170385eb6fe59b0dee8b296092294f3d7 075868b428667860ea5a9064e303d79c05164b404406a1cfcce90219afbc0054 077d647e10da734bc0c304933143f51c527e464e24641e62e26e082e0172de23 0837dd54268c373069fc5c1628c6e3d75eb99c3b3efc94c45b73e2cf9a6f3207 084c18410167528a5477e82e3d37e38bd392d1f38345cb7b3adcd9b60f33ccef 0887728ab91c570da89adbea22d263fd1000cad6c06cd3cd4d3b5a05c54b1a51 0ab783f1e71e72dccce40dffd919ce6448ec187a79ef01b455cecf982a12acc5 0b37afe774e419123fb8b43195d4da247e4d3501e06c8502bf48bd6c7b36f18e 0c9e35cf66d3f68d48e2d85421c7ce1e4ed77337016960ebf0c2334d2f2588f7 0f79418d76664bebd2edbc77389946086fa92de44048d352f79d2776f84821ac 0fa72e1644ed30436844eafc53c3003f0de056d68953673e0b5600099d0b5b8f 102419f9cbfc3d365b86e878b17c680b286f13ccd59ca5c472025ad1c3137e20 103a61304f379f3396e18ca6c6541b3ba3262992f2335cb5f3e6359da894e023 10758122986f3fded7aa67cd2c1a643c41ad868195833b4c2b31ad9308ab51dc 10f8682bd712f4ce2303f41a604e04f1a1c17c363e9003b1bfe727d221f84f03 12187d59d8360e774509e885b9c6e9c0d81c95d9f61a769277e7ced407216d94 12d9ed209b6971d6dc1a320f30fdc1b2b1ca0813514b66c403e20765eb195ca9 13caa182df56553909b17d504910ecd73c09aa6b379714570c474c0b35a76f1a 16d7f059c1ccc386c1fdb7d6ba5f36a20c34f15aa058d81adaf8b0cf9e841cf4 1728a154a0524bbb59dd6fcc66864d731340c5b360e601f5ff5724d4924d7eb1 177de11edf3dac90b337341dbe32f63d29b301a5974c7cfb691c43e80aa96e57 194965166dc4528ee31fd91a101a0717f1ae0453f03e9ebe66fc034b4744e734 1b305537a6086612e1c81167c0d4b7e3693f256fd6f7cd62f912233fbf9cff5f 1c1f063c2dd0db94f8607591d1ee12dbc5e3dfb57216d6dc6526185716841a1b 1d821cb243cba4655befe2205817a64dba10d1aa83a0d6854c5f405253259afa 1eae74471434b30de6b128b790595fb5853160fce04c41850f71a2ee89baa129 20b768603037d6ada2c4052f75f713c6fa809ec5181698b7883eec75dccbeab0 23386660c2e1a812073d59181aaa31a64c9160970005deba5d17a0e72d63f267 23f4301a9e961eb1565afaab5ff1cb09e0443e6e1b33029c4f75705132b408e4 242720437ee3823c29903a84398b1014c15fa83bb7207aaf1513d347702cf748 25ae2db57cbd90018874988ad90dcdc8700f4d711176d9562d38733ff028626b 25df2c1db7dc1f427dfd38d2bf87f5367779b10345b6074f663253876789de1b 25ed069d35cc9376572e31b0e82eef6253788f090b4d9c86e1680febfa871a52 296425089310130baff1511fa1289a3d1c01e5d85adb8a8c31151556032426d3 2b06a75a883f3d697c6a3a48eec1151b125090fe77a72ef791d5411d285830d6 2be537cbe3bcb5b40a9d9c497f06762b729b939281b97e9c76ef172172eae13c 2dff6d721af21db7d37fc1bd8b673ec07b7114737f4df2fa8b2ecfffbe608a00 2e7c02ee164b4e497b451c44f80990da2fc447aba9d44ffa36ec83ef84ba71ca 2e914a745433a6ba44e5d8ddfe4eb0f67a93b57997f881af4b38042b4374b97e 2fb1125082d5d22800a99233f3d2eef14fe675c48901c4991602df61a1a1007a 2fc7205286edf17150ec9aed39dc1f1a06cbd8e968eb8bf12c7e44ba251e77af 30d7642c81b84cf9579940a2bf3d70014d4284cc4ee056fd7dd9fa0cdbfa6364 31a8f53f62d1aa6a99c70252ac5132a99b8f0cc62a54ac6386862d1a38da5aa4 31c85ad0d3b8506222d7eafac77a7fedf6f0e176d7c1eba8ca2753ebcdc07081 322a02578b6c5533086cd33f3ab11d9c9cf1a3b9526f053f3c5b3836ec70ba45 3242399d46cf45cab47cd48fd67ab27f20dcc8808364fee494ccbeed60826d23 3256dfbea3010a20ddb033d591e666541976ab292176242d85b56fda328a6a38 32c17c39c257968b8e7a4e1d1112dda49569d0f7d003d27e42668c3173cbddfe 3377d36415b7e4012c1ed708b2dd5d695299927d8784fc5b098e071ba983bcea 351f23794d318dcabedf5c1c375636d785cde11bdd6f702dd5cc3868da1e6cb0 353d93911c4cc431158555e49320e7cf3110d6e24e60f49f59c40a31cee4d061 354e5ff281df68a0b8c5f9ae0bc5bdbd03b1fb1da787ad18ba15ee3e04d84a0a 357830a5615e37d687ab946643e41b3ddac38db80386e4e0a108dd838806f85b 35d4efab966ac2126cb97b896210179f91ba176677a847aeee89581e9f422222 3b9f1141a45fb780cee05ca2968803eb3893f3dc3a0700262fa1ff52408d327f 3bc8dc250c3284c1d028342f6dc6fb7c48fea3c0cde8854a5f08d0505ef220fb 3bf17fe16048489cdedb9b106948dd21d1cc4b2e9d1ebe03e6e0142d3faf17b5 3d70ae340d64dfd9bf9a8e71c26f2328b9c261b33599a2e927f4477fac26f3cd 3dfb8bbc92db9f2e544537332992100b352416c3cdad2d1d3dbbc572ecc545c8 3e3073dc0777f759fe2e24770890f02140210f0e39f557d2bc1be23edc8f9c64 3e604842b9b7e9128707bbabbc8c32d3b912ae107e24e55e4fd087a23255f164 3f600bf816cdcbd9b37ac7aac68c972a9af9a476d0de6bef5ddd89da159633b5 40da2329b2b81f237fc30d2274529e6fda4364516b78b4b88659c572fbc4bc02 4162ff8482e8e03c68c7aa7a8ae04514e8f1f7dfa2219a131cf9e393ed9a7098 41841e2b220cbc8169e330585f409f0100f8661126e729a5665959aef22d3b68 42f3a9ffff22f332c10b1e7d619045c19acea88f65316e9104965593d9d20886 46b47cfe9ea59fb9d44776f56f8321344c365c01adcc6f5f1d196f4f6adf482a 4908d151b3c4538eabcc98ab89324a53c4786ded72e2eb8f95ecda93d0e48b74 495122753f806a9244bf7355d5cb382477d75beb96f412fe02d6c53d46903b3e 4a43b6702cda0a97cf7089cd7383411b30b61c0bcbee38ba5eaccd70e83104be