Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA256Signal 53/100
d6af1c9f5ce407e53ec73c8e7187ed804fb4f80cf8dbd6722fc69e15e135db2e
Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Found in 1 report: Cato CTRL™ Threat Research: Analyzing LAMEHUG – First Known LLM-Powered Malware with Links to APT28 (Fancy Bear)
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
73%
Signal Score
53 / 100
IDS Rule
Yes
Threat Context
Threat Actors1
Tags
Feed Intelligence Summary
1 report73% confidence
Cato Networks
Jul 23, 2025
Cato CTRL™ Threat Research: Analyzing LAMEHUG – First Known LLM-Powered Malware with Links to APT28 (Fancy Bear)
13 IOCs in report