Indicator of Compromise
4eb994b816a1a24cf97bfd7551d00fe14b810859170dbf15180d39e05cd7c0f9
A SHA-256 file hash identifying a specific malicious sample. Match it against files on disk or in your EDR.
Included in theHashes feed(live, machine-readable).
Seen in these reports
Chinese Cyber Threat Intelligence·Mar 6, 2026
Google Disrupts Chinese APT UNC2814’s GRIDTIDE Backdoor Campaign Targeting 42 Countries
Chinese Cyber Threat Intelligence·Mar 5, 2026
Google and Mandiant Disrupt GRIDTIDE: Chinese APT Espionage Campaign Compromises 53 Victims in 42 Countries
Chinese Cyber Threat Intelligence·Feb 28, 2026
Google Disrupts UNC2814 GRIDTIDE Campaign: Chinese APT Breaches 53 Organizations Across 42 Countries
Related indicators
Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.
01fc3bd5a78cd59255a867ffb3dfdd6e0b7713ee90098ea96cc01c640c6495eb130[.]94[.]6[.]228139[.]180[.]219[.]115139[.]84[.]236[.]237149[.]28[.]128[.]128149[.]28[.]139[.]125178[.]79[.]188[.]181195[.]123[.]211[.]70195[.]123[.]226[.]2351cv2f3d5s6a9w[.]ddnsfree[.]com202[.]59[.]10[.]122207[.]148[.]73[.]1838[.]180[.]205[.]1438[.]54[.]112[.]18438[.]54[.]31[.]14638[.]54[.]32[.]24438[.]54[.]37[.]19638[.]54[.]82[.]6938[.]60[.]171[.]24238[.]60[.]194[.]2138[.]60[.]224[.]2538[.]60[.]252[.]6645[.]76[.]157[.]11345[.]76[.]184[.]21445[.]77[.]254[.]16845[.]90[.]59[.]1295[.]34[.]176[.]665[.]20[.]104[.]91669917bad46a57e5f2de037f8ec200a44fb579d723af3e2f1be1e8479a267966accesscam[.]orgadmina[.]freeddns[.]orgafsaces[.]accesscam[.]organcisesic[.]accesscam[.]orgapplebox[.]camdvr[.]orgappler[.]kozow[.]comasdad21ww[.]freeddns[.]orgaw2o25forsbc[.]camdvr[.]orgawcc001jdaigfwdagdcew[.]giize[.]combab2o25com[.]accesscam[.]orgbabaji[.]accesscam[.]org