Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
SHA256Signal 95/100

e787f64af048b9cb8a153a0759555785c8fd3ee1e8efbca312a29f2acb1e4011

Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.

Location
PeruPeru
Aug 27
First Seen
2025
Jul 20
Last Seen
2026
0
Reports
linked reports
95%
Confidence
medium
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
95%
Signal Score
95 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

71 techniques

Feed Intelligence Summary

0 reports95% confidence
0
Source reports
95%
Confidence score

Activity Timeline

Threat Activity Heatmap

Intelligence SummaryAI Generated

Generated text, not the verdict. Verdict: High Risk.

The identified SHA-256 hash represents a high-severity threat indicator associated with sophisticated cyber-espionage activities. This artifact has been linked to the Mustang Panda advanced persistent threat (APT) group, an adversary known for targeting diplomatic entities and government organizations to facilitate intelligence gathering. The presence of this hash in an environment indicates a significant risk of system compromise, potentially facilitating long-term persistence and unauthorized …

Threat ScoreHigh Risk
95
SIGNAL
Signal Score
95%
Confidence
0
Reports

WHOIS

description
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
references
https://cloud.google.com/blog/topics/threat-intelligence/prc-nexus-espionage-targets-diplomats, https://cloud.google.com/blog/topics/threat-intelligence/prc-nexus-espionage-targets-diplomats/

Export & API

STIX 2.1 Bundle
CSV Export

IOC Journey

No linked reports yet.