IOC du rapport source : https://hunt.io/blog/chinese-operator-secflow-claude-qwen-deepseek-asia
Affichage neutralisé. Un observable associé n'est pas une preuve de compromission ni une consigne de blocage.
ipv4	103[.]45[.]65[.]93	revoked
sha256	00759d29178baabcbe9682a953c64e179fd24d86dac0d6abdc8e5070216923f2	active
sha256	053c8dfb147262aaedf0d9cdce631ad73cfd5b1a808114c12bbe5adfe4796302	active
sha256	0b3d76cf1ac6648d4cfbe39c8fea67c6b28a361ea6de86a92cc7d54a0181cc9e	active
sha256	135b33b289d481d60fa2527aeae5882d33adcb6756df89ea7684f4af3567b141	active
sha256	1c00ce5354c91a9db878e2b4db750c2a74140e0d15aeac9b8cecf4599598b736	active
sha256	20a8ed7d235cf6419e2d4b1e439595ef96961adaecf3c990c5cd507eb4a74ca4	active
sha256	218d8508c2035c78b49d33e087e33643f4f906af5694be68cf939f17fa4b5ffd	active
sha256	27fae1b7be68b0c27c5dad33aaed9de5b38406fb20b971757b6be386e3ffc7a6	active
sha256	2deac4ab60f6cb1bb65fa4df5dbd9dcf7b7bc27e16bea55c3ddbe47154720277	active
sha256	3c9b2ec423f91642d2d09031d47e50d7ebe77a8b12ec5e393405f85da11a0f6a	active
sha256	4ecbdaedf9040dbbb33ce7a96ad961dce0f3ffb2c41285606a27a7c5ab3d2273	active
sha256	548df87041ea2cbe99fc519fd89c5b7cdfe935d87a803a80a5f747aa9f076091	active
sha256	77f5b5321e2f5c18b3c610e50084b98201fb6214e13665cc49da5afbf3f49611	active
sha256	797676d3becc124bb6705ebd76189e8decedae3abf978434d730459133351064	active
sha256	79cc5855375b5c840bae8263dc3dc5a9fd9cbd7920ab4ed65d407fd830d3eda1	active
sha256	80d778c9d9e44896f08b1a196254527e39da4e8ce5edebf8d296b7dec6b7b3e0	active
sha256	853222ffdcc74dd606f6ff79ff353ce3626d50e54e9aa1a87fb03e2121e82aaf	active
sha256	9ef85857ed2b53a23eb41ce5769b4fb5b8b2225404b227a776520771df86706e	active
sha256	a407f540f4eb0c8fae5cd83fa6e210df6c4ed7fca6aedb6ebc5efbf031989ac4	active
sha256	af6404a125d1e4eb67425ec17f2abeec7242fb6f7377de739e47cb7f5d147eee	active
sha256	dcd59349bd6cc29e59da5105f2f08f606ece8dfac4e369e052eca1786450f541	active
sha256	e6ee24c6775867714d1e4b586d75c0168e61ba49b36e0a29b73cbc925df6ae47	active
sha256	eef30bb6834bf349d1b1f4401aa0b8e73631ea632a884c6498a5b3a9e069d412	active
sha256	f51ab15a89155ce4d3bcd0a65cf6a3ccf62115f502e0863c19baf93d11c57acc	active
sha256	f7c233df3423912296a4e78dd1fa7a1f6412606177336be0762961c93e8fae3c	active
url	hxxp[:]//imported-concerns-listening-typing[.]trycloudflare[.]com[:]443	revoked
url	hxxp[:]//marriage-step-wave-heavy[.]trycloudflare[.]com[:]443	revoked
url	hxxp[:]//wins-say-charm-social[.]trycloudflare[.]com/c2	revoked
url	hxxps[:]//claude[.]niestools[.]com	revoked
url	hxxps[:]//deepseek[.]niestools[.]com/anthropic	revoked
url	hxxps[:]//deepseek[.]niestools[.]com/v1	revoked
url	hxxps[:]//glutton[.]niestools[.]com	revoked