Trusted Design

Sphinx Moth: New IOC's on Wild Neutron/Morpho APT

概要

Since mid-2014, the Kudelski Security Cyber Fusion Center has been monitoring and investigating Sphinx Moth. This powerful corporate espionage threat is specifically designed to target large enterprises in the technology, pharma, commodities and legal sectors, penetrating their security and exfiltrating commercially sensitive information.

Created: 2026-02-23

Indicators

• FileHash-MD5 - 428e108ee6ab7f23be7ddc2b6f9f55fd -
• FileHash-MD5 - fe2439ef0ace518e1c1a32585099dab8 -
• YARA - 71002197be0ef4f78441f322370c1c51ca18d3d4 -
• FileHash-SHA256 - ccc851cbd600592f1ed2c2969a30b87f0bf29046cdfa1590d8f09cfe454608a5 -
• FileHash-SHA256 - cafc745e41dbb1e985ac3b8d1ebbdbafc2fcff4ab09ae4c9ab4a22bebcc74e39 -
• hostname - fw.ddosprotected.eu -
• YARA - e63794c2136d405d630d6cb7e940da81263ca59d -
• FileHash-MD5 - fd4c881df95b67ee2f07adad0dca9c98 -
• FileHash-MD5 - b3bc1e3b8fad945119f030573899d204 -
• FileHash-MD5 - 342887a7ec6b9f709adcb81fef0d30a3 -
• hostname - smtp54.dalnet.ca -
• FileHash-MD5 - e0093072c11f13eec66a30b27470a1af -
• YARA - ebccf51f55e652d203d09a55a40b6421cc882703 -
• YARA - 180c5c80a4f4c7f43f957e6469c7ab50575da146 -
• FileHash-MD5 - 894d47a8e23a64fc41a23484bcb50900 -
• hostname - fw.scan-soft.net -
• YARA - 3ac8f5db3973b5ca040063141e510ee884c5bfb9 -
• YARA - 7512741e5a65036f5b1b9fec1e37280f84c4d6e5 -
• FileHash-MD5 - d91ed1715de8eddd5244565926ed2899 -
• FileHash-MD5 - 6f55de44da45f3d47b5d935d5b374413 -

類似Pulses

• Wild Neutron – Economic espionage threat actor returns (score: 0.53)
• Zeus Sphinx Pushes Empty Configuration Files (score: 0.53)
• PROJECT CAMERASHY: CLOSING THE APERTURE ON CHINA’S UNIT 78020 (score: 0.52)
• UPS: Observations on CVE-2015-3113 (score: 0.52)
• KASPERSKY 2016-02-09: Poseidon Group: a Targeted Attack Boutique (score: 0.52)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る