Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA256VerifiedSignal 56/100
43df42fd79f6f81e530892b54634598770d6e496796a863c596e616bcb3fec70
Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Found in 2 reports: OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found; Glassworm Hacks OVH Clouds CLI tool
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
75%
Signal Score
56 / 100
IDS Rule
Yes
Threat Context
Malware Families2
Tags
Feed Intelligence Summary
2 reports75% confidence
Step Security
3d ago
OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found
15 IOCs in report