Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
14 IOCs
Tax Trap: Fake Indian ITR Notice to Dual RAT Deployment in Six Stages
Malware Families
Excerpt
Tax Trap: Fake Indian ITR Notice to Dual RAT Deployment in Six Stages Skip to content Solutions Identity & Access Management Managed Detection & Response Exposure Management Meridian Howler Cell Partners CrowdStrike Microsoft Palo Alto Networks SailPoint Splunk Resources Company About Leadership Careers News Contact Us Login Contact Us Login Malware Analysis Active Campaign The Tax Trap: From Fake Indian ITR Notice to Dual RAT Deployment in Six Stages July 07, 2026…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability(4)
Victim
Indicators of Compromise
Open the mindmap →14 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 60ad81d75bd59e12b43392f7abf95bcb66a6e27091a46f9bf5cca51a6c01853f | Medium | Score 43/100 | First seen |
| SHA256 | 93dd8b7b393289f88493596faa4ae70054d9eb4fe47f2dd334f0c6bb5262f2a8 | High | Score 85/100 | First seen |
| SHA256 | 3dd5148cf3cfc7fe2196d066ef39d8f03d07022dd5e917227164abc8d6c6d1ed | Medium | Score 43/100 | First seen |
| SHA256 | fd062b4096f22c47bf6124a5b58322940ff676cb8d8fccd40af4d110f93dc2fa | Medium | Score 43/100 | First seen |
| SHA256 | 030b90666a581934de0683ef9232f137867db804f6100c0479958826dc2e4cbb | Medium | Score 43/100 | First seen |
| MD5 | 3343f6a8885a308da11ae0d18cd4a7f5 | Medium | Score 53/100 | First seen |
| SHA256 | a1521585d54fe29675f906b538d86a6d3b5804db637b714ab1fbf6fb01d0a6f1 | Medium | Score 43/100 | First seen |
| SHA256 | 7ee61469f1c171d1631a72720ecaa0516598b4671e320287674f5d6817a9fb92 | Medium | Score 43/100 | First seen |
| SHA256 | bfeb1e56fbcd973bb219022430a57843003d5644d21e62b9d4f180e7e6c33941 | Medium | Score 53/100 | First seen |
| Domain | ouewop.com | High | Score 68/100 | First seen |
| SHA256 | fb520caa54b7e498708a6ebd0029c2492134c87c85324a3301ab450caa19e112 | Medium | Score 43/100 | First seen |
| Domain | kkxqbh.top | High | Score 71/100 | First seen |
| SHA256 | 2c0de3d5432d5a14cb03936a460ceb633b53a51881c4fa4f3dfa87fedef2148e | Medium | Score 55/100 | First seen |
| SHA256 | 52c19cfdc25bd1c1be3386493d60ded19e2fe35e053d81dda2b212d8dde84330 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…