Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
37 IOCs

Operation DragonReturn: China-Nexus Cyber Espionage Campaign Targeting Govt. of India/MoF Tax Infrastructure via Multi-Stage DcRAT Deployment

Seqrite
Seqrite
Published June 26, 2026Original Report

Excerpt

Authors: Dixit Panchal & Soumen Burma Table of Contents: Introduction: Key Targets: Infection Chain: Initial Findings about Campaign: Initial Mail: Email Attachment: Lure: Official GoI, Income Tax Document: Technical Analysis: Infrastructural Artefacts & Threat actor Attributions. Campaign Timeline. Conclusion: Seqrite Coverage: IOCs: MITRE ATT&CK: Introduction: Seqrite Lab actively tracks and analyse threat actors and their campaigns, focusing on attribution,…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTURE223.26.63.40kkxqbh.topikkkkddd.comCAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(3)
Capability
Victim

Indicators of Compromise

Open the mindmap →

37 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA2565a00485968679dc0ed6d80b659f48287603864c223e952918d2c2aaddfa2d280MediumScore 53/100First seen
SHA2568673ce317876e6c3fe868c98524a3b2ae86a79b737536b865f044a52d16a7193MediumScore 53/100First seen
SHA25634d1231a3bf1e13a9b90daecb5c74d52aea94ca54427b203d77e1adc61a5c4f9MediumScore 53/100First seen
SHA25640593369e14c9ab7b5e2fd186a580dbcd790ebb902f3aedc12c92cd617302960MediumScore 53/100First seen
SHA256db946f3f2b409370d14a6e69cf029f2818985f19320fa09b63bd3268dc830b02MediumScore 53/100First seen
SHA256fc17d5b4d64cb61a5aa8fb6bbe1e94885f129b2bf8ee91bca1ccca2b537f6616MediumScore 53/100First seen
SHA256e6346e3087db2bfba4551fcf89d94ae49aa92dc22f0ec2b718187a96e3a3b83cMediumScore 53/100First seen
SHA256eccff5c026a01cbe91db45cd0289f8822985aa5183f096d8add69762696d100dMediumScore 53/100First seen
SHA256b4fb231356254426e340ab1dba50fa37a69859fc4e8a2dbdfc3e1db082006847MediumScore 53/100First seen
SHA256c6fc06db6a1318152c09200352b40c8fa794f1089988835c1df92174347be8ecMediumScore 53/100First seen
SHA256fdd9752f4bb03762828e2e2bb6ec26c5f05a664dc28e02457685ddb3650d3e95MediumScore 53/100First seen
SHA25603d2b73ecde0575a1e5ea24d6e4f12987cc081c0bc22dadf8c4219e8e38ca6e0MediumScore 53/100First seen
SHA256ec5d4103b3d97885e9575ad045b2ef5467bf9fccf71828e418e6488d78983146MediumScore 53/100First seen
SHA2564a040770fd81d0db9e04cb8dbd2e07e61969072962bb4e736b7c7001444cc2faMediumScore 53/100First seen
SHA2561787d1119cd3b40e0e5f19d62821958b7d5c2bbe0518bf1e3fb2e44fdeb4fa58MediumScore 53/100First seen
SHA2562f72f4b71e33c80f122dbe5360a8d687577260567d4b59cf8c07ee2182e8cebaMediumScore 53/100First seen
SHA256b0fcd7d9396e70b89e8292f6b80f933607b6fc9a9d3d4dd4ca69b408a2625932MediumScore 53/100First seen
IP223.26.63.40HighScore 69/100First seen
SHA256590a75978ab33a97280be1e2ae62a2e416ada45a11bc3f1cb77c99f3eb542b4eMediumScore 53/100First seen
SHA256c6651d6ce31c3a00357e579981d48c0da942b5bbe1582bf3d612a07dc3bc0ff6MediumScore 53/100First seen
SHA256589aa1f7252cae74538343cd35443c0a8f58ed280f2016918b6e539a0c09529aMediumScore 53/100First seen
SHA2562f2f8f92af86fb962c30c4c1c9d673f9d94886373d0fcf78f8d105c051ffc643MediumScore 53/100First seen
SHA2567e142c8fa614cc39d0453aa648b12209821c6bcbb77ee02094f70161b40d50aeMediumScore 53/100First seen
SHA256696f6a1a0fbf7b4ff977cc36382f6d2bc6d7813ed84b0195d925d1f46c24568cMediumScore 53/100First seen
SHA2566c9ae8a979ad18da2927ae4fdbd73d3c870ead4ea3d437656a3bdcc81b85a050MediumScore 53/100First seen
SHA256133e4d3f1dcd99a35fec92ad13bafa3790b6d585f8ec46527fe0ae01da98ad22MediumScore 53/100First seen
Domainkkxqbh.topHighScore 71/100First seen
Domainikkkkddd.comHighScore 69/100First seen
SHA25619ca5fe04ca45a18c5bad9658ff73a8f39fe20ced78f690595f1b4c5a90af324MediumScore 53/100First seen
SHA2566c774188a54ae07ae896abdf1ea6695cc29f529388888665e05322af3e9178e1MediumScore 53/100First seen
SHA2568ed95259300ca268279867d2999d9c4f6585c6c45308635fc39af87da27546b5MediumScore 53/100First seen
SHA2566751ad8d0aeb6ac67cd54ea42657ce1f16addc3e3111f9e60b11931ebf58e77dMediumScore 53/100First seen
SHA256a8614dfad5fd2a79302a7c4829a0fed6f3a0a46b11beb28f89531cdfa83d32b3MediumScore 53/100First seen
SHA2562c0de3d5432d5a14cb03936a460ceb633b53a51881c4fa4f3dfa87fedef2148eMediumScore 55/100First seen
SHA2569e73cd733707e5f7c9091147b029a6974b985d6c90a9cc2cb47bc0ae8a0f9245MediumScore 53/100First seen
SHA256879cfe23a96e822f3873fd90a37d548d7975ba0552ce28527d3d1e292000c59bMediumScore 53/100First seen
SHA2565e97f7c17bf0466355be0438c7cc3e2e4d125e31368f2fbcb8e1d79cb97f137aMediumScore 53/100First seen

IOC Relationship Graph

Building graph…