🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for sha256_hash c9c85d8df4bf308a577cd3d14476297180ebf61bf5200ed8611cb9a5f118c4a7.

Database Entry


IOC ID:1972029
IOC: c9c85d8df4bf308a577cd3d14476297180ebf61bf5200ed8611cb9a5f118c4a7
IOC Type :sha256_hash
Threat Type :payload
Malware: WARDENStealer
Confidence Level : Confidence level is high (100%)
Is compromised? : False
First seen:2026-10-18 06:10:15 UTC
Last seen:never
UUID:3ebf5f13-ca72-11f1-bd13-42010aa4000a
Reporter Daydream
Reward 5 credits from ThreatFox
Tags:DvnX unpacked WARDENStealer YapStealer
Reference: https://bazaar.abuse.ch/sample/07a491805b23d8ebf039f56c43107261a6d3a2014ae39ec513dfb4415220ca73/

Avatar
Daydream
Unpacked Warden Stealer (YapStealer) x64 payload extracted from jli.dll loader 07a491805b23d8ebf039f56c43107261a6d3a2014ae39ec513dfb4415220ca73; C2s satinett.pics, falaheeh.mom, ricarle.homes.