Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
13 IOCs
Threat Intelligence | On-Chain Backdoor in a Malicious TRAE Extension
Excerpt
A malicious extension that has already been removed from Open VSX can still be downloaded from the TRAE IDE extension marketplace. The extension disguises itself as a commonly used Solidity language support plugin, with the package name juannegro.solidity. As of July 18, 2026, TRAE’s plugin marketplace API was still providing version 0.0.189 of the extension (VSIX file). Reverse analysis shows that the extension is actually a cross-platform (Windows, macOS, and Linux) malware…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →13 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA1 | f8a900db50b3331be6b768ba460bb59f3e40c344 | Medium | Score 53/100 | First seen |
| SHA1 | fd3fc58bcbd8ccc77b6000201438edfc636e7ca7 | Medium | Score 53/100 | First seen |
| SHA256 | ff943371750ecd2ce6caa50c12d673e82743bdbc9569552eebfa98ccb2f4ac69 | Medium | Score 53/100 | First seen |
| SHA256 | 80d2672e2599732d3c0ae2a4cd0d1e3fe4d555a60273ce33feb99db3f34d250f | Medium | Score 53/100 | First seen |
| SHA256 | 9b73e7cd4e1425e770392549d8df46c706139ef476f4f7b9ac405165dc8d9696 | Medium | Score 53/100 | First seen |
| URL | http://107.189.27.46:3000/app.js | High | Score 58/100 | First seen |
| IP | 107.189.27.46 | High | Score 58/100 | First seen |
| IP | 107.189.16.215 | High | Score 58/100 | First seen |
| URL | http://107.189.27.46:3000/app.js. | High | Score 58/100 | First seen |
| SHA256 | fae61f31f00988fdc5cc9e7272b51e08af2e245d81003237875415930fd27358 | Medium | Score 53/100 | First seen |
| IP | 91.108.240.156 | High | Score 58/100 | First seen |
| URL | http://91.108.240.156:3000/app.js | High | Score 58/100 | First seen |
| SHA256 | b601776817363b96295119f7221338a122d5247a35a77a64b04f286e1bbcc565 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…