ThreatFox IOC Database

You are viewing the ThreatFox database entry for sha256_hash 59221aa9623d86c930357dba7e3f54138c7ccbd0daa9c483d766cd8ce1b6ad26.

Database Entry


IOC ID:1783127
IOC: 59221aa9623d86c930357dba7e3f54138c7ccbd0daa9c483d766cd8ce1b6ad26
IOC Type :sha256_hash
Threat Type :payload
Malware: GlassWorm
Confidence Level : Confidence level is high (100%)
Is compromised? : False
First seen:2026-04-09 05:17:43 UTC
Last seen:never
UUID:ad8459b2-33ab-11f1-9af6-42010aa4000a
Reporter Lenny_3BO
Reward 5 credits from ThreatFox
Tags:javascript npm-supply-chain Wave3

Avatar
Lenny_3BO
GlassWorm JS implant (obs_out.js). npm supply-chain vector as rn_international_phone_install v0118. Multi-channel C2: arhive, calendar, solana.