Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
3 IOCs

SolyxImmortal - Analysis of a Python-based Information Stealer

Pulsedive
Pulsedive
Published May 27, 2026Original Report

Malware Families

Excerpt

SolyxImmortal is a Python-based information stealer that targets sensitive files, credentials from Chromium-based browsers, and keystrokes. The malware leverages existing Python libraries to extend its functionality and employs threading to execute multiple commands simultaneously. This allows the malware to collect information and monitor key strokes simultaneously. SolyxImmortal targets Turkish sites using keywords specified in the functions that collect screenshots of…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYGh0st RATVICTIMunknown
Adversary
Infrastructure
Capability(1)
Victim

Indicators of Compromise

Open the mindmap →

3 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA181c66c043982cfee9e60ae94203f4336da0b50c0MediumScore 55/100First seen
MD52690f7c685784fff006fe451fa3b154cMediumScore 55/100First seen
SHA2565a1b440861ef652cc207158e7e129f0b3a22ed5ef5d2ea5968e1d9eff33017bcMediumScore 55/100First seen

IOC Relationship Graph

Building graph…