Skip to content
Bulwark Black Bulwark Black LLC
Latest
Jscrambler npm Compromise Shows Build Pipelines Need Runtime ControlsGhost Phishing Shows Why Email Security Must Follow the BrowserPakistani Police Intrusions Show Why Public-Sector Data Systems Are Strategic TargetsBad Epoll Shows Linux Kernel LPEs Belong in the Patch Priority QueueFake Payment SDKs Show Why Dependency Risk Is Credential RiskCritical UniFi Flaws Put Network Control Planes Back in the Patch QueueVidar Stealer Campaign Shows Why File Size and Fake Signatures Still Beat Weak ControlsADFS Signing Keys Show Why Federation Servers Are Tier-Zero Identity InfrastructureUAT-7810 Shows Edge Devices Are Becoming China-Nexus Relay InfrastructureFortiBleed Shows Firewall Credentials Are Ransomware FuelNetNut and Popa Takedown Shows Residential Proxies Are Now Attack InfrastructureVect and TeamPCP Show Supply-Chain Credentials Are Ransomware FuelOusaban Shows Banking Trojans Are Learning to Hide From SandboxesNUT upsmon Command Injection Shows UPS Monitoring Belongs in the Patch Queue

Indicator of Compromise

15bdc66aca9fb7290165d460e6a993a9

MD5 hash Seen in 1 report Watch this →

An MD5 file hash identifying a specific malicious sample. Match it against files on disk or in your EDR.

Included in the Hashes feed (live, machine-readable).

Seen in these reports

Malware · Jan 30, 2026

Android Malware Campaign Abuses Hugging Face AI Platform to Distribute RAT

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

108[.]187[.]7[.]133143[.]204[.]11[.]112148[.]135[.]44[.]146154[.]198[.]48[.]57 19f1a6b9ad1a9654e7c78fa2d37a3ec10192b01b636c5fc1995b80bf6f7dcb36 a50cf45d8b119af0cc75679c8307b05e29f2bc85b6d0bd55999dd018639f1c72 au-club[.]top b62c906078644edd3439e2d986abd2e2 b716a8a742fec3084b0f497abbfecfc0 bdf3779ddc10f241603be57a90865b680cde8c31 cdn-lfs-us-1[.]hf[.]co d184d705189e42b54c6243a55d6c9502 d8b0fd515d860be2969cf441ea3b620d fc874c42ea76dd5f867649cbdf81e39b hf[.]co/rhf[.]co/repos/a5/0c/a50cf45d8b119af0cc75679c8307b05e29f2bc85b6d0bd55999dd018639f1c72/19f1a6b9ad1a9654e7c78fa2d37a3ec10192b01b636c5fc1995b80bf6f7dcb36?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%27b[.]apk%3B+filename%3D%22b[.]apk%22%3B&amphxxps://cdn-lfs-us-1[.]hf[.]co/rhxxps://cdn-lfs-us-1[.]hf[.]co/repos/a5/0c/a50cf45d8b119af0cc75679c8307b05e29f2bc85b6d0bd55999dd018639f1c72/19f1a6b9ad1a9654e7c78fa2d37a3ec10192b01b636c5fc1995b80bf6f7dcb36?response-content-disposition=attachment%3B+filename*%3DUTF-8%27%27b[.]apk%3B+filename%3D%22b[.]apk%22%3B&response-content-type=application%2Fvnd[.]android[.]package-archive&Expires=1764089304&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTc2NDA4OTMwNH19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy11cy0xLmhmLmNvL3JlcG9zL2E1LzBjL2E1MGNmNDVkOGIxMTlhZjBjYzc1Njc5YzgzMDdiMDVlMjlmMmJjODViNmQwYmQ1NTk5OWRkMDE4NjM5ZjFjNzIvMTlmMWE2YjlhZDFhOTY1NGU3Yzc4ZmEyZDM3YTNlYzEwMTkyYjAxYjYzNmM1ZmMxOTk1YjgwYmY2ZjdkY2IzNj9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPSomcmVzcG9uc2UtY29udGVudC10eXBlPSoifV19&Signature=Mqc2vLuG17L9PD9eOO96Tbl8S1P6Efgzc1c%7EvjGQqg7jE6NcLyKqkIn7Koq06ybpChfuNeUOUSIRvqUXUd%7EAUt1mvivbp8cZla5frbYSx6ce2-Enp7KmhKXafgpPH6Hr8sGEt8EO56g3oF867bsCO3qH4Q9HqcX6DZZfgyysDxK22VIzEOYCoGqzIa0pj1gFr57PGdcyQJxqFDvpQ9KiCoLxqGjf4O5EpO-4bLJ53D3nZUTrDZX3sCHo7hUOxwqBMUefhgL0BKhL4JPfaBsHyfM9Cj%7EO1yPsf6CqZd%7EVfQWh9CH6ZW834YlKppFxovUMdg3dUHxUNUBDZg2-Nf3plw__&Key-Pair-Id=K24J24Z295AEI9hxxps://huggingface[.]cohxxps://huggingface[.]co/datasets/xcvqsccm/sfxyt851/resolve/main/b[.]apk?download=truehxxps://www[.]trustbastion[.]com/xiazz[.]htmlhuggingface[.]cohuggingface[.]co/datasets/xcvqsccm/sfxyt851/resolve/main/b[.]apk?download=truetrustbastion[.]comtrustbastion[.]com/xiazz[.]htmlwww[.]trustbastion[.]com
Browse all indicators → Machine-readable feeds → Extract IOCs from text →