Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
68 IOCs
Clubfoot Wolf launches massive offensive on Russian businesses
Excerpt
Overview In May and June 2026, the Clubfoot Wolf cluster conducted a large-scale campaign targeting Russian organizations across the following sectors: manufacturing retail e-commerce agriculture IT transportation healthcare science The primary targets were Russian wholesale distributors of chemical products. The adversary also attacked several organizations in Belarus. To initially compromise victims, Clubfoot Wolf sent out phishing emails containing legitimate remote…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →68 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | https://crop.sh/ncPHvl0 | High | Score 58/100 | First seen |
| URL | https://sunlightfriends.tech/world/library | High | Score 58/100 | First seen |
| SHA256 | b38032f5b2059cacc28246dd0b739e19b6a68daf34add740d5ce6be87354b498 | Medium | Score 53/100 | First seen |
| URL | https://crop.sh/NfhStZD | High | Score 58/100 | First seen |
| URL | https://disk.yandex.ru/i/6s3ZGTQf7T_P-g | High | Score 58/100 | First seen |
| SHA256 | 45154678b808a70316f0172a5012ffdfc7d7ddcde856440099fcdbad64e84ddb | Medium | Score 53/100 | First seen |
| URL | https://sunlightfriends.tech/nature/today | High | Score 58/100 | First seen |
| SHA256 | 31b0f515012355e104a1e4f10baff85c3066a037f17272ce9c2445fd8377a96a | Medium | Score 53/100 | First seen |
| URL | https://sunlightfriends.tech/latest/news | High | Score 58/100 | First seen |
| URL | https://crop.sh/KzcOSm7 | High | Score 58/100 | First seen |
| SHA256 | bea07bc2359e8f3ce914b0027b5548ae58c9a019f330446b2c81050cd9ca1b0d | Medium | Score 53/100 | First seen |
| SHA256 | cee0ad69647d4840013e836b657d8fd79b9be7389ccbc70e15c5cb96bf926f8a | High | Score 64/100 | First seen |
| SHA256 | 6a8dfd602daa3b9dc2ceb146837a7966a37af8ab224ed11478e1f6d87f375b7f | Medium | Score 53/100 | First seen |
| URL | https://disk.yandex.ru/i/RgUWO-uhakJF8w"; | High | Score 58/100 | First seen |
| SHA256 | fb25a19a74bc7549f5e4e1f299886fb09a9d5b4fd4599c5a9b7f2d534ce71691 | Medium | Score 53/100 | First seen |
| SHA256 | 7f58b98e9d4b2d06dadef2b8656d337283118a135806dd711fb9de51ca63911d | Medium | Score 53/100 | First seen |
| URL | https://sunlightfriends.tech/learning/portal | High | Score 58/100 | First seen |
| URL | https://crop.sh/enuSDJG | High | Score 58/100 | First seen |
| URL | https://sunlightfriends.tech/weather/news | High | Score 58/100 | First seen |
| SHA256 | aedcfbac94161f74b2ce63ad9da2f613809860fc8aa09d6ea0b57e964c47f8a8 | Medium | Score 53/100 | First seen |
| URL | https://sunlightfriends.tech/health/shampoo | High | Score 58/100 | First seen |
| SHA256 | bed54c819cc8ff502fff41f6d9c726836b6086c9afdd47f2261809196c973c38 | Medium | Score 53/100 | First seen |
| SHA256 | 490585f82a0ddaafd9eead803859e06dafc0219a5bd1c08482c98f3d37eec231 | Medium | Score 53/100 | First seen |
| SHA256 | c5a1dee1ae7f0a04dfa91481d0c1d5ad5c887a77e657def8878af600a98fd8c6 | Medium | Score 53/100 | First seen |
| SHA256 | 7b6f6fe88ff9d953965e81b1bed256528c93ff159156bc17b8811d7cfd5dfe47 | Medium | Score 53/100 | First seen |
| SHA256 | fa877d45432e7712d1832508c77f063958a5cec05038152eb2be5e79992c3966 | Medium | Score 37/100 | First seen |
| SHA256 | 53c6a0a51ef3cf9d38034a7600c94e1ae3968dbec5bbb5d9fdcd26764c6b30e2 | Medium | Score 53/100 | First seen |
| URL | https://crop.sh/r1zUUv4 | High | Score 58/100 | First seen |
| SHA256 | 38d96dd1c26a7a98c8b55c925863d0f5c8c099a73192c65e3a1e47ea636d3d29 | High | Score 85/100 | First seen |
| URL | https://crop.sh/72TT8cO | High | Score 58/100 | First seen |
| SHA256 | 11ad9f6c235ea561317d89590fa41d75348019850735b998b60661635ad99e9a | Medium | Score 53/100 | First seen |
| URL | https://sunlightfriends.tech/weekly/forecast | High | Score 58/100 | First seen |
| SHA256 | 20c8fd700796b80ea093e23ec812943adfc63c3b8653bb09b581fd7f4127c652 | High | Score 68/100 | First seen |
| SHA256 | d3c90e61c3ffa059658c36e39334cb38c0b23cbde46f5078705fcfad67c9f3d8 | Medium | Score 53/100 | First seen |
| SHA256 | f15e4e140fceeb393bcb2c8d61a2333b37c30270527b5c48d8440e3ec1e02ae4 | Medium | Score 53/100 | First seen |
| SHA256 | e20c0900513551265dda37ce5334c71f5b0e8b20e19f9d8391f77987e2458f20 | Medium | Score 53/100 | First seen |
| SHA256 | 100e0ca51a6a25efac16627be80c7ce992a5506470136e43cb8b24d8828ba82b | Medium | Score 53/100 | First seen |
| SHA256 | 82671b7f09811ff38b3cab186776d06cc9e89d434080f1eb26fa1c35767eaca5 | Medium | Score 53/100 | First seen |
| SHA256 | 73bd4f12f3e7d155dfbcb6d016b99d40cce8554964ecc51de40b70fab3a4c3a5 | Medium | Score 53/100 | First seen |
| SHA256 | 41c1b4b09cb3185075f57befd5278119ee0a952418144779898378f0963897e9 | Medium | Score 53/100 | First seen |
| SHA256 | b90a7f17b5406db3ee17ec4bc82a704c6128b4ad8652776b4f55bc3948fa8385 | Medium | Score 53/100 | First seen |
| SHA256 | c709c30074155f8f0a431828c23cc08df6959505051578ec28659a47a4da2fa6 | Medium | Score 53/100 | First seen |
| URL | https://fleepsterones.fun/media/like | High | Score 58/100 | First seen |
| SHA256 | fa07773b3af0539442504f86973fe2a68e040f80ebea388c5ed62d8f94eddb6a | Medium | Score 53/100 | First seen |
| SHA256 | 9fa461bd75788d27ceb778dc0f9773d641e804b3e10103c482ba4747153178f8 | Medium | Score 53/100 | First seen |
| URL | https://fleepsterones.fun/fashion/week | High | Score 58/100 | First seen |
| URL | https://crop.sh/0x47s6B | High | Score 58/100 | First seen |
| URL | https://crop.sh/6zUo8Ok"; | High | Score 58/100 | First seen |
| URL | https://crop.sh/OLiH8AD | High | Score 58/100 | First seen |
| SHA256 | 6478585efed46b0616ca201c51464de7af5ba8985c3b948f9b67db09cbd62e97 | Medium | Score 53/100 | First seen |
| SHA256 | 3325be6c18c35b66e7f527950af97a4235e04d026a81780c135d6cec3f8245db | Medium | Score 53/100 | First seen |
| SHA256 | b2e8f9f9a69c1be0d1814b064b73586afbf730e2ab9d9fb10dd5711be4febe85 | Medium | Score 53/100 | First seen |
| URL | https://sunlightfriends.tech/beauty/series | High | Score 58/100 | First seen |
| URL | https://fleepsterones.fun/content/articles | High | Score 58/100 | First seen |
| URL | https://crop.sh/mD5Gmt2 | High | Score 58/100 | First seen |
| SHA256 | 4972b6583645d28600f076e73def05890b54a9d98c8b328d61f421c79a021db6 | Medium | Score 53/100 | First seen |
| SHA256 | 79f169be997f883ef02559a0af3f014f63c1c0308931913decd79c0aafaf659f | Medium | Score 53/100 | First seen |
| URL | https://crop.sh/OSRXf5B | High | Score 58/100 | First seen |
| URL | https://disk.yandex.ru/i/RgUWO-uhakJF8w | High | Score 58/100 | First seen |
| URL | https://sunlightfriends.tech/monthly/horoscope | High | Score 58/100 | First seen |
| SHA256 | 0c2947904711ef63ac3cc24ba2e7a059e318dc219d14eeaebb6b46fd277f7f3d | Medium | Score 53/100 | First seen |
| SHA256 | 644ad315071324e7f86e9b04dfc7dae515ca1a7ae386b21207c4ab38d1a164d6 | Medium | Score 53/100 | First seen |
| URL | https://crop.sh/9hXkrRN | High | Score 58/100 | First seen |
| URL | https://crop.sh/6zUo8Ok | High | Score 58/100 | First seen |
| SHA256 | 03dbaee9cbc05abb6a35fd7804dcf7e83e0675da40eabcfd161d1d6b387363b3 | Medium | Score 53/100 | First seen |
| SHA256 | 8fde3f60f9ae901a9fa04888d3050c9a65fb63722a4b41a6d6ad7d38183c37d5 | Medium | Score 53/100 | First seen |
| SHA256 | b24b8d96ebea10cb7e9ffb73256cc46f9041123e7c2cc26fe92d355a8378a87c | Medium | Score 53/100 | First seen |
| SHA256 | cdf7c97cfb494ade90886765606294db0b98a2576bc1d152bc8c4ec97672b687 | Medium | Score 37/100 | First seen |
IOC Relationship Graph
Building graph…