Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
13 IOCs

Hirudo: From Fake Updates to Patched Banking Apps

ThreatFabric
ThreatFabric
Published October 14, 2026Original Report

Threat Actors

Malware Families

Excerpt

Hirudo: From Fake Updates to Patched Banking Apps Skip to content OUR SOLUTIONS Mobile Threat Intelligence (MTI) Fraud Risk Suite (FRS) REGIONS Europe Asia Pacific Middle East & North Africa Americas USE CASES Social Engineering & Scams Account Takeover (ATO) Device Takeover (DTO) Hybrid Fraud ARTICLES RESOURCES WEBINARS DATASHEETS & REPORTS IN THE NEWS FUSION FIRESIDE Contact Linkedin Twitter Jobs Privacy Intel/PGP Contact Research Europe MENA Americas APAC…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYPlayINFRASTRUCTURE18.139.79.161www.helloharmonyos.com134.122.153.68CAPABILITYMETA StealerPlayVICTIMunknown
Adversary(1)
Infrastructure(6)
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

13 indicators

TypeIndicatorConfidenceScoreFirst Seen
IP18.139.79.161HighScore 58/100First seen
SHA256425cd7072b5e9386ac94e97fe272980b6ef36240df6b5d77b371ab7378004c83MediumScore 53/100First seen
SHA256d51f2bd7ffb49c224d8eaec2c8ca1c8ab9fce2fd5fdceea01eb54296c2f47b4dHighScore 86/100First seen
SHA256f796eb9ecf516e4f1fafcf89200d9f7d8ddd234f705e63f1bc8fc3ef583f0248MediumScore 53/100First seen
SHA256b2270c29b3d0a49a716730d6ef108cffec0b1a4b159dd02e93333fb85e492b99HighScore 86/100First seen
Domainwww.helloharmonyos.comHighScore 58/100First seen
IP134.122.153.68HighScore 58/100First seen
SHA2560097a0406be20544e98e981075427f40789db40fe4a53b1b4523383a945328b7MediumScore 53/100First seen
IP134.122.153.136HighScore 58/100First seen
URLhttp://43.225.157.157:8766/request_tokenHighScore 58/100First seen
IP134.122.153.92HighScore 58/100First seen
SHA2562e45277acfde3fb704179476b08f428f66a03670bbdbf2e8ec79c0b0333c009bHighScore 86/100First seen
Domainjiekou.baojingtextile.cnHighScore 58/100First seen

IOC Relationship Graph

Building graph…