Indicator of Compromise
d25024ccea8eac85a9522289cfb709f2ed4e20176dd37855bacc2cd75c995606
A SHA-256 file hash identifying a specific malicious sample. Match it against files on disk or in your EDR.
Included in the Hashes feed (live, machine-readable).
Seen in these reports
Chinese Cyber Threat Intelligence · Mar 6, 2026
Google Disrupts Chinese APT UNC2814’s GRIDTIDE Backdoor Campaign Targeting 42 Countries
Chinese Cyber Threat Intelligence · Mar 5, 2026
Google and Mandiant Disrupt GRIDTIDE: Chinese APT Espionage Campaign Compromises 53 Victims in 42 Countries
Chinese Cyber Threat Intelligence · Feb 28, 2026
Google Disrupts UNC2814 GRIDTIDE Campaign: Chinese APT Breaches 53 Organizations Across 42 Countries
Related indicators
Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.
01fc3bd5a78cd59255a867ffb3dfdd6e0b7713ee90098ea96cc01c640c6495eb 130[.]94[.]6[.]228 139[.]180[.]219[.]115 139[.]84[.]236[.]237 149[.]28[.]128[.]128 149[.]28[.]139[.]125 178[.]79[.]188[.]181 195[.]123[.]211[.]70 195[.]123[.]226[.]235 1cv2f3d5s6a9w[.]ddnsfree[.]com 202[.]59[.]10[.]122 207[.]148[.]73[.]18 38[.]180[.]205[.]14 38[.]54[.]112[.]184 38[.]54[.]31[.]146 38[.]54[.]32[.]244 38[.]54[.]37[.]196 38[.]54[.]82[.]69 38[.]60[.]171[.]242 38[.]60[.]194[.]21 38[.]60[.]224[.]25 38[.]60[.]252[.]66 45[.]76[.]157[.]113 45[.]76[.]184[.]214 45[.]77[.]254[.]168 45[.]90[.]59[.]129 4eb994b816a1a24cf97bfd7551d00fe14b810859170dbf15180d39e05cd7c0f9 5[.]34[.]176[.]6 65[.]20[.]104[.]91 669917bad46a57e5f2de037f8ec200a44fb579d723af3e2f1be1e8479a267966 accesscam[.]org admina[.]freeddns[.]org afsaces[.]accesscam[.]org ancisesic[.]accesscam[.]org applebox[.]camdvr[.]org appler[.]kozow[.]com asdad21ww[.]freeddns[.]org aw2o25forsbc[.]camdvr[.]org awcc001jdaigfwdagdcew[.]giize[.]com bab2o25com[.]accesscam[.]org