ThreatFox IOC Database

You are viewing the ThreatFox database entry for sha256_hash 42533fbb40fe274c96a31c948ae6e84b6c103f9da6f27c9d1dc5c011f7b719d0.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1780704
IOC: 42533fbb40fe274c96a31c948ae6e84b6c103f9da6f27c9d1dc5c011f7b719d0
IOC Type :sha256_hash
Threat Type :payload
Malware: Unidentified 001
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
First seen:2026-04-04 07:10:52 UTC
Last seen:never
UUID:3816fe20-2f73-11f1-9af6-42010aa4000a
Reporter Lenny_3BO
Reward 5 credits from ThreatFox
Tags:cve-2026-21513 exploit LNK mshtml

Avatar
Lenny_3BO
LNK exploit CVE-2026-21513. 4-stage ActiveXObject MSHTML zone bypass. rundll32 Control_RunDLL loads M.k CPL from wildishadventure.com/secure9/.