Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
161 IOCs

Infostealer riding the AI Train

Check Point Research
Check Point Research
Published October 23, 2026Original Report

Threat Actors

Excerpt

Key Points Aokigahara , a newly observed infostealer, has been spotted in the wild. An earlier version may have been known as Kamidere or Stygian . The malware includes traditional data theft capabilities targeting browsers, VPN clients, cryptocurrency wallets, FTP/SFTP clients, password managers, and email applications, among other targets. AI applications and development tools are notable targets. The stealer collects authentication files, session data, and configuration…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYSandwormINFRASTRUCTUREhjazfioe.surfsomelitersofblood.pwkkeyyou.ccCAPABILITYunknownVICTIMunknown
Adversary(1)
Infrastructure(6)
Capability
Victim

Indicators of Compromise

Open the mindmap →

161 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA128099fc5a8cbbd40173f8ac0aded9044fdb4a598MediumScore 53/100First seen
SHA1ae9d6b1a32a45b05edb920538e538a3d6a5fe439MediumScore 53/100First seen
SHA190c057dafefbee423e3014266218272d454a0aa3MediumScore 53/100First seen
SHA19f20034441e78574aec7ad39842a342f939eaf6aMediumScore 53/100First seen
SHA1244371fc1642f0548b807b0a4a2e7ea5d7b4c82aMediumScore 53/100First seen
SHA1dba5fef27b53ff479a4d7046cd1f22710081a16cMediumScore 53/100First seen
SHA10d8d0bad2e08856ba379e425e2e90e49506af631MediumScore 53/100First seen
SHA1db3332ce75676389b79cf3603d81cb231cb7c19cMediumScore 53/100First seen
SHA1de9d152010819c8fb5cb611a4de920399e69cfebMediumScore 53/100First seen
SHA18d6c86e0af7807f9b5baf15e9f076bb81e012515MediumScore 53/100First seen
SHA1133dc00ad81638e6b0a2f8f163b4d694ce477165MediumScore 53/100First seen
SHA1241e37b8fc5ffeefbd1d89a82b74cf2d92b49eacMediumScore 53/100First seen
SHA1b36d0796e33f808eaeb33b33908327a410680c56MediumScore 53/100First seen
SHA1c00aceaa40b38e48f662ac927bb86302934aaf96MediumScore 53/100First seen
SHA1130f2710cf9863bdd6724e8912600505b6fb7ef2MediumScore 53/100First seen
SHA197c80e2d382e6e55f61702da3afb838fdec2f4f1MediumScore 53/100First seen
SHA1699c809a116106da40b3f641c11b0db34d0f1c5eMediumScore 53/100First seen
SHA16a09fffca381f6624d2def1083284ca486306e7cMediumScore 53/100First seen
SHA1fbe8708247fabd8a1bc3963db3911b5e77728669MediumScore 53/100First seen
SHA18dc40b7208b8c0d95d1ab8dda9a56fff790b3dddMediumScore 53/100First seen
SHA1f4184e1bb61e19d190555c50fdb9d4591767bf53MediumScore 53/100First seen
SHA1db69c7c930fd5dc5097847979a965fdea4171d5bMediumScore 53/100First seen
SHA1af196456d2ebf9556ab239661922565e1bca9ac0MediumScore 53/100First seen
SHA13aaeb49864108c92af50feeb5d9e3b3efaa39818MediumScore 53/100First seen
SHA1f990bf4f05dfa4d86b3e3bc0a54f62e91b83f2c6MediumScore 53/100First seen
SHA151ae6cad54f33846f83a352457b9a44ef8b7a61dMediumScore 53/100First seen
SHA15fe11fbb89d33efa712ffb8590626bd88fecab8fMediumScore 53/100First seen
SHA10b74ce90a39278fb97fe94f6306af71cbe679503MediumScore 53/100First seen
SHA18d7a81119ce7be6eb452192f08fa2669228ff597MediumScore 53/100First seen
SHA1f5993e64a18e7494b25a185de9f63a1df961b99aMediumScore 53/100First seen
SHA14595d1875441ffb8c076856e366d1f4f5c74a679MediumScore 53/100First seen
SHA182ebfc09c98bd211ff8b08efcd8ec8b9ce1fb4beMediumScore 53/100First seen
SHA1e5c43abd1c212b2f2a61d5e1cb7821406ca5dc8eMediumScore 53/100First seen
SHA189f296aef7988bdd59109e4263d0a31c886770aaMediumScore 53/100First seen
SHA1682dd6392004e1131b1aa3f2351a0bc7adb84d14MediumScore 53/100First seen
SHA16e073a196a9bfa01da418b5783c2395fb22c7ec9MediumScore 53/100First seen
SHA12362a326070d83c167251873b389bd783781cf6cMediumScore 53/100First seen
SHA1426bea548a24f7f39c279770b5dd21fbed7f7328MediumScore 53/100First seen
SHA1324e0fffc7977f8ff591993819123d33c2970953MediumScore 53/100First seen
SHA16393c0d3fb76f771a9418c2d152c621929ee002bMediumScore 53/100First seen
SHA18c4c1d8325adb463c34694ce3a5a851e97b81a6fMediumScore 53/100First seen
SHA18c3111a61fbf30e86b8206397ce3c0017e5ea509MediumScore 53/100First seen
SHA1f47d45eea1c42b066f8537baf72ffa266646bf62MediumScore 53/100First seen
SHA13696baa239c479f9f5103618214972890f1a473bMediumScore 53/100First seen
SHA11cb6ccfdcb277a0277729443d15f17a441fa0edaMediumScore 53/100First seen
SHA12f30b116ca3dc48ff5783c3bb7391d671866e27bMediumScore 53/100First seen
SHA138b2c29b46086b417181deb958e8b276a9d1fbf4MediumScore 53/100First seen
SHA1079ddf5cc7d6ca2e02f860f87d4d18c83db9d331MediumScore 53/100First seen
SHA19d424ce23753ffddc7b39477222123b0f2c33066MediumScore 53/100First seen
MD5ca47b44161834cb70a224dbe3d92a383MediumScore 53/100First seen
SHA1a00da33342a5ea5168d851a5c93109e07cf95c49MediumScore 53/100First seen
SHA183b43ce0ee9881201451c0604fb5b792bd4581f5MediumScore 53/100First seen
SHA1fe6b7d6fa8c2424d14a0d465ab78aaf83db0d07bMediumScore 53/100First seen
SHA1d34491da5aa159314129c0ff67f957d873703e35MediumScore 53/100First seen
SHA1ad960d2abb1999a7260c5f498532a5bb8754c2a5MediumScore 53/100First seen
Domainhjazfioe.surfHighScore 58/100First seen
SHA16eb8f17dba69f6d25b7f5c529b25d199707b69e2MediumScore 53/100First seen
SHA19369e0e5eae22cff71b375ad285ea89471f25101MediumScore 53/100First seen
SHA1dfd1540c0185e74ec65acfcae1af7ba0da36c774MediumScore 53/100First seen
SHA1912ed8ce7767f94f62de6a30fb8e9df7c0c512f7MediumScore 53/100First seen
SHA1f30e9730db0663f87c67a4b9a0cf12ee59b1621aMediumScore 53/100First seen
SHA1b335483800d35a29c25767c917725e24c21b0f2bMediumScore 53/100First seen
SHA1d8bfff5139b54b6f98f07c051cd25d7aa465fec8MediumScore 53/100First seen
SHA13586eeaf3ffe2c3a4f1d005aee863b7aee7cc7bdMediumScore 53/100First seen
SHA18d860ca64ce0cbf40871fd66b9e3a513e73cda90MediumScore 53/100First seen
SHA104eddccb79db41e03a4ee8542e8a33d7f1d9fe18MediumScore 53/100First seen
SHA186230c07e638b85bc8010df1aa9e33ca61fda4ccMediumScore 53/100First seen
SHA15ef7eb755f1e3f6bf8586794777466a639057dcbMediumScore 53/100First seen
SHA19003310bf73dc337b8b50131f1c0724a79161aacMediumScore 53/100First seen
SHA14417d2645adb6e7e94959daf483f93058500840fMediumScore 53/100First seen
SHA17233a15327dc2f0cca0292e6352eebf6e6e090d8MediumScore 53/100First seen
SHA1b33e59c598845d2547ddc7f654115df2284bb3aeMediumScore 53/100First seen
SHA170915fac07af4ad7acc1868fe05dc00b98206f0fMediumScore 53/100First seen
Domainsomelitersofblood.pwHighScore 58/100First seen
SHA1c5b50b5e14dfb5e028dfd88a4e4fb960dd650b52MediumScore 53/100First seen
SHA118e041b5a0c668392ff4d036f3f9660c2698311eMediumScore 53/100First seen
SHA170e91644802053cfa68be6ec0f94207282ff27e4MediumScore 53/100First seen
Domainkkeyyou.ccHighScore 86/100First seen
SHA1ff402e64bc42222c8a4ee703123903c2a2117dd9MediumScore 53/100First seen
SHA1a63ded811d412cd0f859891b0c1f066b87bb1b80MediumScore 53/100First seen
SHA1a2abdf1af38da9995a3b6672ce6c34e9e17c39a4MediumScore 53/100First seen
SHA1e4d93fa1b2d0fd26e8b877511ea33badb4628169MediumScore 53/100First seen
Domaindfwioeiofwr.infoHighScore 58/100First seen
SHA16f7d5935602c188b1e3066b4ab9aeef7b85a8ec2MediumScore 53/100First seen
SHA1385e21a96687a33f79f9cab0627aec7218e1a8f4MediumScore 53/100First seen
SHA1e052ff49190f54e0ffc52f7b3f7b5e7b9e121c4cMediumScore 53/100First seen
SHA11835f1e0b1eda3dc4b39682ecad3eba88cbbc44eMediumScore 53/100First seen
SHA130737fa46f2ff93e33f45008cf306233954ea898MediumScore 53/100First seen
SHA1cc12fcb9e5e6f7afde66f5c3452ed6e3cd6d5390MediumScore 53/100First seen
SHA12cdc77108c585d14b1567053b8f8a58ea78c255fMediumScore 53/100First seen
SHA1da986a3cb2ce67456ef374fbdd957d370a1a4367MediumScore 53/100First seen
SHA14485feb1385975ef13f08148cdc679f50fa0cc6dMediumScore 53/100First seen
SHA11a6a6e08a01cc3f1455af2c4ecd59a3d7802cd7aMediumScore 53/100First seen
SHA19f05045f5447d79c8c0d0f5cb589fd85c89620d3MediumScore 53/100First seen
SHA100d52c7e759d878f0d8a117502f6d854af13f007MediumScore 53/100First seen
SHA11a7248720f3ac79082841b006582f20799b314a9MediumScore 53/100First seen
SHA148c6b66dc4b4d40d72b7460e6fd670b6c03d5d40MediumScore 53/100First seen
SHA11cb8dc11bdb8baf342b83079fb650cd6bb1b132dMediumScore 53/100First seen
SHA1f0b23f420659babb3a730b122259440091c53c12MediumScore 53/100First seen
SHA13c56a0c3c59a1425bfdcdffda9e8b308f478b147MediumScore 53/100First seen
SHA1456414c0acf463e06f95f5bd3d8355758fca6b53MediumScore 53/100First seen
SHA18b0cf62382f620bbbf5d176295d63ed522ab9c2cMediumScore 53/100First seen
SHA256fc157583cc171c2c82419748390126839a0f8fba317a75f919e785aca3d98f8eMediumScore 53/100First seen
SHA1ec7cd90d56e5b73caa9d4eb0472bfee68d716121MediumScore 53/100First seen
SHA16c860007f8f49de8e9848b538bd7acdc6bfcdf55MediumScore 53/100First seen
SHA12045f165d737f2d43ba603d444dfa5d9e6f05805MediumScore 53/100First seen
SHA1cbdff0df0dbdbc3c1845d208661dd75fd335ef93MediumScore 53/100First seen
SHA11701db4fa798b309cb25227408406dde4c69de8aMediumScore 53/100First seen
SHA10f69792cb926a416766d47a30a05009c13be0d64MediumScore 53/100First seen
SHA1c2e28ba5523c1f3a545a0b4a00a9d5e9c8ae7583MediumScore 53/100First seen
SHA1007137599bc4d69ee952a5228b5fcb2c3b9a95a7MediumScore 53/100First seen
SHA1a84148b4d408544325c20ee04299ae95c762b6a2MediumScore 53/100First seen
SHA198c6649cc256dfadf1af939da46f037b05c0f2e5MediumScore 53/100First seen
SHA1bad339c5ad65808285b0e87498f2ea6f669417d9MediumScore 53/100First seen
SHA199b28a20851a3ed29769a469f4dd31ebbb8a83deMediumScore 53/100First seen
SHA10c46ac5555cf8f305c1345a21d0802c52bf52cd8MediumScore 53/100First seen
SHA170d4007b11e56752fffb81f71c90987f4bb441faMediumScore 53/100First seen
SHA11e94d7f1d501724076fcf98459e14b68321d45f7MediumScore 53/100First seen
SHA162dcc9ba2a5eee9dd941ad08766603c89a45869bMediumScore 53/100First seen
SHA1d3c90275dd7279a791d717676be15789376f7aa7MediumScore 53/100First seen
Domaindobeqnesmot.ccHighScore 58/100First seen
SHA15fadf206dc163f63ebf66f984042b00c67121813MediumScore 53/100First seen
SHA11a97a18db74f2b6df984c9a188a79b4e65a06b81MediumScore 53/100First seen
SHA1f8cf33b18e9932d285696fee40a7fee2a87341c2MediumScore 53/100First seen
SHA163cc5033532cd00bda3d4968b1257629e613505aMediumScore 53/100First seen
SHA1e3af6d9e3b35e5e04feda3cde96256dd3b099624MediumScore 53/100First seen
SHA1c323c59815082ac842f0bafcc01f537444e1cc5aMediumScore 53/100First seen
SHA150060c0fc5fa8932671eb24b03b05d00c2e99951MediumScore 53/100First seen
SHA1f633fc9fd16dadca2725d3d54aaf13ea1a62174fMediumScore 53/100First seen
SHA18e9fd1274b77ff9726c4637d008a9d599c9d5f1eMediumScore 53/100First seen
SHA159bbaca8a848215e7e4af7cec320432c51b0b812MediumScore 53/100First seen
SHA1b6f0dfd3aa2fc7b8b2ad432c4a4276da23ceb46bMediumScore 53/100First seen
SHA1b523d56d82485253f2e3619437c8398b7ee0f20dMediumScore 53/100First seen
IP2.26.252.48HighScore 86/100First seen
SHA161a024f5a42a9a91b0a9871a1613c7fb3ef5613bMediumScore 53/100First seen
SHA1daef439e1f110d624ce50fe0f9d9d24f61f7497bMediumScore 53/100First seen
SHA1c810acdf30bcdfc6e8021e7f62a3bcce0828c2eeMediumScore 53/100First seen
SHA172aa6417a19c45dabdd6c79087fb13c73ae7b823MediumScore 53/100First seen
SHA1211e45f306b84a82cfe736635c176a424e7479dcMediumScore 53/100First seen
SHA11e072236f87cd914dc583ca2163460d656bfcfbaMediumScore 53/100First seen
SHA10e76150cee3f2b89f0fbe39106ab2898db109f09MediumScore 53/100First seen
SHA1f6d950a5a8e5ba336f748b66745c6c1f189d3362MediumScore 53/100First seen
SHA14c07021f8b0cdd3ca334a13f9af2bade9e699dc2MediumScore 53/100First seen
SHA1eec7ece53d47e50940584f4dec684a24a78f42f2MediumScore 53/100First seen
Domainneihite.ccHighScore 86/100First seen
SHA1b607025d3e06d1e8cffcd398c64871d7fcd92bf4MediumScore 53/100First seen
SHA17cc6c75fad93b2482a9c5f4522530007c72f99e0MediumScore 53/100First seen
SHA1057a2d1dedeb93b7765c455a9e0c469e7cbe4843MediumScore 53/100First seen
SHA1f35e6d2936c0f6dc26bdc68f6d1599cf438a863aMediumScore 53/100First seen
SHA1b4491f1919a88deedebe7fba56b593e7d6655458MediumScore 53/100First seen
SHA121ef070e39f651118a804882374dc2dfa3e38666HighScore 85/100First seen
SHA1a4871f4a61faf74e1cceaffe26901f6076c9f37eMediumScore 53/100First seen
SHA1fa61cf3bebefd88ea9d06007a4b85791aa851c8aMediumScore 53/100First seen
SHA1bab4c910e3c98085bf228519f346d071a75e44e3MediumScore 53/100First seen
SHA1f8dbc552c89bef758e4fcbd9942d06bc0c11db0aMediumScore 53/100First seen
SHA1cc708ae3d7aa084279122c0db7250096f750d6b0MediumScore 53/100First seen
SHA1e8d09eb2e5857fde39b44aeb48078f5396809026MediumScore 53/100First seen
SHA1c8456bb71a74ed6305455c318295b8a39e9277f3MediumScore 53/100First seen
SHA14b3a4ad0acd43fc8796147381074a98e8e576904MediumScore 53/100First seen
SHA1151d8013ca3ab3dab9cd37f4ed9870cc83e87a77MediumScore 53/100First seen
Domaingate.dfwioeiofwr.infoHighScore 58/100First seen

IOC Relationship Graph

Building graph…