Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
29 IOCs
LxBase RAT first observed in attacks on Russian companies
Threat Actors
Malware Families
Excerpt
Threat actors deliver the trojan via mass phishing campaigns and utilize a multistage loader chain Introduction Between July and September 2026, we observed mass phishing campaigns targeting Russian companies across various sectors, including finance, engineering, manufacturing, energy, retail, agriculture, transportation, construction, and IT. The emails contained the LxBase RAT (remote access trojan), which had not been previously observed in attacks against organizations…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(2)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →29 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 62269c1cd1394d6fac0a26b7fcc0b0ef | Medium | Score 53/100 | First seen |
| SHA256 | 69fb84a8bf70b92a291c4e7f64b2a566bcd1dbafe2f0215e49c520aa14d1bdbe | Medium | Score 53/100 | First seen |
| SHA256 | b43bb0c7fd0dcc73ece88c856917adc88dd47b030b4cfd61e7ad518ed218104c | Medium | Score 53/100 | First seen |
| SHA256 | 8ea82e2e22c82fc92dec1c5d8b6860b2775ff8d4690841085052863cebbfa8f6 | Medium | Score 53/100 | First seen |
| SHA256 | 7b6c39570c0a6976be7b23e035ff3c3c321cccbc50052c027eefc1439c3013fe | Medium | Score 53/100 | First seen |
| SHA256 | 1fb723fb6e44f75b18aa920dc8d43f3121a8a990b096c681d3733446b54ba8c6 | Medium | Score 53/100 | First seen |
| SHA256 | 638453730108ca41d1961abe96084a70339fde59ad151a0128024a1b5c7bb1cd | High | Score 85/100 | First seen |
| SHA256 | 9c45e0155ba9cfa6f7de048c16003b6ee2d1e965813ac2131022737e5b65186e | Medium | Score 53/100 | First seen |
| SHA256 | 76e65afc4d1e093b2d925de571f32b07069db911edf981643228f89c4539c1ee | Medium | Score 53/100 | First seen |
| SHA256 | 126390fff28e625ad7e7696802e410810f3f092096dc5c3a385842a661ed7d39 | High | Score 85/100 | First seen |
| SHA256 | 6d1d682be71ae048aa3c54806590c97efb7ab2e824f1a5ac98819f166903cf93 | High | Score 85/100 | First seen |
| SHA256 | 586f772c71960ccffce550c0fffff9bc7086c143a8b8cd0ce618bfd15f1ffd17 | Medium | Score 53/100 | First seen |
| SHA256 | aaf2aeccff1750395cce5128bd1a47a948b8056690666aa3bf63f9d6971167d9 | Medium | Score 53/100 | First seen |
| SHA256 | 8b6ee91adc94dfffcc0bc245d6a0db4c367d3a4755d544e849bf67fd253f8ea6 | Medium | Score 53/100 | First seen |
| IP | 217.64.151.119 | High | Score 86/100 | First seen |
| SHA256 | f1f29d8921d90f40c0571d7f2cea25e6a98b7a4827f14eeb613c7c2cbcd16c7f | High | Score 85/100 | First seen |
| SHA256 | de44ed664d71451374801b94b75e836dbaf094b6117fdba8307be47a8d480188 | High | Score 85/100 | First seen |
| SHA256 | 2bdb865c80afc6f8eac8747cefd827954b072db11f24054d71e7cb2cc5890a07 | High | Score 85/100 | First seen |
| SHA256 | 70d5fc3de2c4a4e60c72e6840f436e10167b9844f06e6667732eb58a738e191a | Medium | Score 53/100 | First seen |
| SHA256 | 83bb3c74f78f51469145fd0d935015e00e81cd727b7ae54c002ba54499577980 | Medium | Score 53/100 | First seen |
| SHA256 | c863ab042e42ec0415b1e09e9cbf92e6c55dfed332b22cf1df0c647c071db85a | Medium | Score 53/100 | First seen |
| SHA256 | ba28225298ecc362b4d7b829b29d2bc0b3233587832cce53fde2dcfb9f0d0574 | Medium | Score 53/100 | First seen |
| Domain | lxrrxl.ydns.eu | High | Score 86/100 | First seen |
| SHA256 | bf5abb5d8ed08b97a2712083d4bde0453fcc5d6d79de9664ee028f0741c5cb7e | High | Score 85/100 | First seen |
| SHA256 | 35f21ee165d26ab28ef286fe67d6d0c27e67277173a514334d19a27996c05278 | High | Score 85/100 | First seen |
| SHA256 | 4d4f76e687fa4248246ca98fc501c6dcad01cd3c1cb53de3c38fa25559001671 | Medium | Score 53/100 | First seen |
| SHA256 | 84d7fef5df408ccd5e3441512af6c6772e0e2d8a76d15a1ccebe1f2d4ef61c42 | Medium | Score 53/100 | First seen |
| SHA256 | f99ccb0a67e929f83ce55296c9c5cbbc8248516eaae1e299f508f23be6305417 | Medium | Score 53/100 | First seen |
| SHA256 | 6231d4b45837712f547f698fe1de3fb03a71fd793ee2066f5a89487bfa1595d1 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…