Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Excerpt
In April 2026, we discovered a new malware campaign targeting players of “hentai” games. Once launched, the infected games install a previously unknown malicious implant on the user’s machine. After a few days, the implant downloads and executes a Trojan, resulting in full system compromise and broad remote control capabilities for the attackers. We dubbed this malware family “Argamal”. The malware uses COM hijacking to persist on the…
Read the original report →Diamond Model
Adversary
Infrastructure(5)
Capability
Victim
Indicators of Compromise
Open the mindmap →25 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA1 | e815a9b418d09c2d4bcd074c2c0bc21406eeb22f | Medium | Score 53/100 | First seen |
| SHA1 | 1405a3c5e0aeb08012484134e16cdec4ab29b4a4 | Medium | Score 53/100 | First seen |
| SHA1 | c2d9d48b3b10bd58cdf5df9463e3ffcd60533ff3 | Medium | Score 53/100 | First seen |
| SHA1 | ae4601a19d28332a3ec6ac31b385cdf53be53450 | Medium | Score 53/100 | First seen |
| SHA1 | 5f1f3689bcf23de1b280b5f35712946da0f7978f | Medium | Score 53/100 | First seen |
| SHA1 | 901cfa97b1baaf908fd4a02bb52d970f576c4193 | Medium | Score 53/100 | First seen |
| IP | 186.158.223.35 | High | Score 69/100 | First seen |
| SHA1 | 2423a5bf0fa7cb9ec09211630a5488629499691b | Medium | Score 53/100 | First seen |
| SHA1 | 02819d200d1424882af81cb504b3e8614b32397a | Medium | Score 53/100 | First seen |
| SHA1 | edce72f59e4c1d136cd1946af70d334c19df858d | Medium | Score 53/100 | First seen |
| SHA1 | dad26f61da7b8bccc78364411812be74c025b475 | Medium | Score 53/100 | First seen |
| SHA1 | 17f8f8f34dfa737f36182fed7ff9e9814a114058 | Medium | Score 53/100 | First seen |
| SHA1 | d2cb0d7a9ad2b5d4ea7c2da8aec62beb37cf36d6 | Medium | Score 53/100 | First seen |
| Domain | asper1.freeddns.org | High | Score 69/100 | First seen |
| SHA1 | 29f1d346a6e71774c7dad25b90f446b2974393df | Medium | Score 53/100 | First seen |
| SHA1 | 76253fb55aed707440e808ea78e7101318436b1c | Medium | Score 53/100 | First seen |
| SHA1 | 9803604ec45f31f9ef75bcca1e1310d8ac1fc3a6 | Medium | Score 53/100 | First seen |
| Domain | country1.ignorelist.com | High | Score 69/100 | First seen |
| Domain | winst0.kozow.com | High | Score 69/100 | First seen |
| SHA1 | e05f1767c2a337910ed75e90288838d6d0541164 | Medium | Score 53/100 | First seen |
| SHA1 | 954722b0c9c678b1313d1f8b204e102842dc5889 | Medium | Score 53/100 | First seen |
| SHA1 | 535f4337f261b6da20a3c614eb13270bed2d533a | Medium | Score 53/100 | First seen |
| IP | 181.116.218.56 | High | Score 69/100 | First seen |
| SHA1 | 42add9475e67a1ccc6a6af94b5475d3defc01b85 | Medium | Score 53/100 | First seen |
| SHA1 | 69331cfdac792dc79240e6a6bb6e803eabd70beb | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…