Indicator detail
7fa5ce40…e76a
SHA-1Score 58Activeappdomainmanager hijacking
Confirmed by one sourceTracked for 31 days
- First seen
- Last seen
Tags
- appdomainmanager hijacking
- blackwood.dll
- blinder tunnel
- chisel
- dll sideloading
- shelbyloader v2
Source provenance
Which feed reported this indicator, when, and with what confidence — plus the raw per-source tags.
| Tags | ||||
|---|---|---|---|---|
| AlienVault OTX | 58 % | appdomainmanager hijacking, blackwood.dll, blinder tunnel, chisel, dll sideloading, shelbyloader v2, iraqi critical infrastructure, runtimebroker.dll, github c2, iranian threat actor, psproxy.dll, dubai airports impersonation, pulse:Iranian State-Aligned Threat Actor Masquerading as Dubai A |