isotope13 labs

Crit

Ecosystem

Domain

Sighted elsewhere

e3/57/e357114e1077a191a9b7246e6246a2f7c973c3ba3273f24ddbd782ac4f9e4e63 5d ago

e357114e1077a191a9b7246e6246a2f7c973c3ba3273f24ddbd782ac4f9e4e63 O(Er)H(Os)

indicator-removal/notification

7e/ee/7eeedb92233390493bac404ff00a47078ce5f27ca7e67befc89803decf788e45 5d ago

7eeedb92233390493bac404ff00a47078ce5f27ca7e67befc89803decf788e45 O(Er)H(Os)

indicator-removal/notification

45/8d/458d65fab96e8d9b95ba133738ec83f275108af5bacbf176507ca2df6b734492 5d ago

458d65fab96e8d9b95ba133738ec83f275108af5bacbf176507ca2df6b734492 O(Er)H(Os)

indicator-removal/notification

ae/1a/ae1a594bba496a4311814655bef3d8c1d423f71a8d8a9b06039e89d57b6a88e3 5d ago

ae1a594bba496a4311814655bef3d8c1d423f71a8d8a9b06039e89d57b6a88e3 O(Er)H(Os)

indicator-removal/notification

36/9e/369e3b14e523e65592a79d6d405b5837f6e47b392a2dffa18a0e5b91baec1f74 5d ago

369e3b14e523e65592a79d6d405b5837f6e47b392a2dffa18a0e5b91baec1f74 O(Er)H(Os)

38% indicator-removal/notification

63/26/6326c95c78b288ec17edd79c3c6179fab15305b418f5c871fda0398e372c17de 5d ago

6326c95c78b288ec17edd79c3c6179fab15305b418f5c871fda0398e372c17de O(Er)H(Os)

indicator-removal/notification

cf/5d/cf5df1eb67dff7bd1a8a5c57107e83714d02c622a5f2d893d268213e890abf88 5d ago

cf5df1eb67dff7bd1a8a5c57107e83714d02c622a5f2d893d268213e890abf88 O(Er)H(Os)

indicator-removal/notification

2b/5d/2b5d2b60e39b4cdcb5896d4eae68abb3f165b0432142231185a7a7713ec73303 5d ago

2b5d2b60e39b4cdcb5896d4eae68abb3f165b0432142231185a7a7713ec73303 O(Er)H(Os)

indicator-removal/notification

a.js Oct 15

f9f765b673f35f470c4cb2f6c1d234ccdad855b5e2ba4deeba73b239fd7aa7cc O(Er)H(Os)

masquerade/extension-mismatch

2e/47/2e479ce3a718dcd6ef7def44ad7514436bceefb9cad0ce462d3a722fc5635a3e Oct 11

2e479ce3a718dcd6ef7def44ad7514436bceefb9cad0ce462d3a722fc5635a3e O(Er)H(Os)

platform/defender

Trojan-Downloader.JS.Agent.cpo Oct 10

9d64e5bb696fe3cafa3bbfadd6ec5a5ffef9616bc50e58adca29207b6d2bb37c O(Er)H(Os)

hidden/execution

Trojan-Downloader.VBS.Agent.qz Oct 10

4d0ab261ca0ac76ec686de235546cc74def67c95f500d4aa834d47b636b61db5 O(Er)H(Os)

hidden/execution

Trojan-Clicker.HTML.IFrame.wt Oct 10

054ac476e67803519fc800f22593b8c88f23bac457c79dfa05c87bf3659dd107 O(Er)H(Os)

hidden/execution

print-only-exclusion.ps1 Oct 9

1374ce1b068ff8a61b4a8941c46884505a60bf47fa98ef9048a72b0522021e9e O(Er)H(Os)

86% Defender exclusion command

mediate_fga 0.1.0 OpenFGA for Mediate: an authorization adapter whose rules are a relationship model in a store of its own. Sep 17 erlang

2b8bcd68fbbb87670131d02dad714b16ecd744b28bb6e7c20205fcf7a71ec561 O(Er)H(Os)

@iconify-react/circle-flags 1.0.3 Sep 13 javascript

d1c0d5d5af7ba494cf15eff64ac11ae5f1d971aba5dbeca3c6f225f347a51c80 O(Er)H(Os)

@iconify-solid/circle-flags 1.0.3 Sep 13 javascript

2286d472ed08a56b492e1a994c786d6b60723cd81631956c484b14771b6ed913 O(Er)H(Os)

Backdoor.Win32.Ashley.e Sep 12

caca3ad3798bdcc03ebdf1f21c06c535a287bd1474950780482752cceeaabe43 O(Er)H(Os)

99% Named backdoor, UPX packed, evasion

IM-Worm.Win32.Guap.bi Sep 12

f339dacc702c19c4f88134aa55dcc2d873ad75c6290af2184b08c08f67311f8a O(Er)H(Os)

injection/staged

Trojan.HTA.StartPage.j Sep 12

a518391954b006d7f85c59d58ad0de326ebf6ec3a790081d072ce9153b7e2d69 O(Er)H(Os)

hidden/execution

minimal-x86-64/nixos-minimal-25.05.813814.ac62194c3917-x86_64-linux/nix-store.squashfs.d/2h8fjr1v5wn3gz3k6j50w6y0msw2c2d2-sudo-1.9.17p2/libexec/sudo Sep 11

f806ea193d31448213dad54c94c7422d29cd35b7f2d3bd4814592d791429525d O(Er)H(Os)

identity/system

Trojan.JS.StartPage.n Sep 11

1e650761e79168638b45e8e5a2516eecab2d6db5187d2c86d5b363bb108c8623 O(Er)H(Os)

71% Browser hijacker registry modification

setup.hta Sep 4

fdc24883a1d95bd21621c7426124fefba49bfcc959c1c774a4d5dab6893689fc ✓ O(Er)H(Os)

89% HTA installer with obfuscated payload

agent-framework-azure-cosmos-memory 1.0.0a260813 Azure Cosmos DB Agent Memory Toolkit integration for Microsoft Agent Framework - semantic memory with fact extraction and user profiles. Aug 13 python

a25febd13f7f3c255fd638a5401485af540cf26db3e44427e6e9cd1ed528af1c O(Er)H(Os)

39% legitimate Microsoft package

Net-Connection-Match v0.5.2 Runs a stack of checks to match Net::Connection objects. Aug 2 perl

b2e61d0571b002c26ab1826f697e65f1fc1d9e547de8aef8a3c7d524f8fe0379 O(Er)H(Os)

identity/process-title

sdlhack 1.4-30.fc45 Force full-screen games to minimize Jul 21 fedora

f8523023a486ae32068f99a5e09d906b281c50af3fc030188867bbfb2211216f O(Er)H(Os)

libplacebo 7.360.1 Core rendering algorithms and ideas from mpv as an independent library 771,140 installs Jul 17 python

26cbbd3d7b91801826c779c3f7e87d071856d5cbe3d55b22777ca0d984fb02ed O(Er)H(Os)

pipewire-v4l2 1.6.8-2.fc45 PipeWire media server v4l2 LD_PRELOAD support Jul 16 fedora

aac3253cdd5d11abf4328a818581ceffb912dda80e78391fee593faf1b46e41e O(Er)H(Os)

libpathrs-dev 0.2.5-r0 libpathrs development headers Jul 14 wolfi

739578b8eace529f7cd7d518e95e172ad4c009b90645035003c2372c9969b0be O(Er)H(Os)

github.com/DataDog/datadog-agent/pkg/ssi/testutils v0.83.0-devel Jul 11 go

4decac5fb6f76266752ae635546cf2a93b2f44f71b9637134524321527476a5c O(Er)H(Os)

github.com/datadog/datadog-agent/pkg/ssi/testutils v0.81.1-rc.1 Jul 10 go

d272bb14512d8eaa46701e0cb66442d2794e6e3c972742ac55dafcab26b14abe O(Er)H(Os)

Atoll.Annotations 0.11.2 Package Description 4,102 installs Jul 4 dotnet

7521dd11167a48e9219fab6b6d36b8a7184d0a36dd2cc076a4d98606f751f5e8 O(Er)H(Os)

mralston/cakephp3-bootstrap-helpers v4.0.8 Bootstrap Helpers for CakePHP 3.0 5 installs Jul 2 php

9b021a9e5961b56715deae2a71758055c5ebf436d1f75ae05aa70581ad1e4456 O(Er)H(Os)

83% Legitimate PHP library test files

libseccomp-doc 2.6.1-r0 Jul 1 wolfi

cf2d7caf430c312d7cff01e6bfce58a2ae204f9c5585cead276c86aeb703973a O(Er)H(Os)

58% Legitimate documentation package files

phantomwatson/cakephp-json-api 3.0.2 json-api specification plugin for CakePHP - http://jsonapi.org/ 667 installs Jun 30 php

3e2b1db7e4660f9d918c466cfa25401bf8576470717037491491fe9a79ee6888 O(Er)H(Os)

38% Legitimate CakePHP test suite files

vision-agents-plugins-anam 0.6.5 Anam avatar plugin for Vision Agents Jun 30 python

5dfedc683cdcc66f11d78936875a6baad4e01ea7c6b9ab99b13cb2c107c1a2d5 O(Er)H(Os)

80% Legitimate Python plugin package

vision-agents-plugins-qdrant 0.6.5 Qdrant RAG integration for Vision Agents with hybrid search Jun 30 python

914626a54642f850a5ce808e1417ef5df851525f22824445c1063de2000f518f O(Er)H(Os)

46% Legitimate Python package metadata

vision-agents-plugins-mistral 0.6.5 Mistral Voxtral STT integration for Vision Agents Jun 30 python

009f862a6dac4f00e84ec7884cd3bf1011ce3ec2dfb98f3a273e8cd13128268e O(Er)H(Os)

76% Legitimate Python package metadata

liburing-ffi 2.15-r2 Jun 30 wolfi

95fc14bf916927bb4ea8655077104b41b1f133fc5fc0d453ebfc5e2de4c17897 O(Er)H(Os)

83% Legitimate system library package

liburing-ffi 2.15-r1 Jun 30 wolfi

530db376eb7cdabcfb251ce30e29a44e4faddedb7f98fdbd5c3fe954e7428654 O(Er)H(Os)

83% Legitimate system library package

liburing-ffi 2.15-r0 Jun 30 wolfi

a82f6f7b8f08b16d95278aab6373093fdc9cab053f3b7ef9687bcb324f7a792f O(Er)H(Os)

83% Legitimate Linux system library package

rivulet-rb 0.1.7 A small Rack web framework built on dry-rb, falcon and forced layering architecture 549 installs Jun 28 ruby

1b33944d20597d6158158cc4309aeb7745a0dfccae855d100ea51fd0fd1fd77f O(Er)H(Os)

imageconfig.py Jun 28

011819739e4ab8ab3d0af4ca7bd79150d0cd8f78332f99a895735b815ca68abc O(Er)H(Os)

madv.so.1.1 Jun 28

16307a8d4dca9909aee172f8597d7ddd9484eebfebfceae8861563ff68daaf63 O(Er)H(Os)

80% LD_PRELOAD usage warrants review

mpss.so.1.1 Jun 28

668c306a90a2704dfde0558cdeb45272d1e7b49e0f775a34b2f9b4f444ea6679 O(Er)H(Os)

80% LD_PRELOAD usage warrants review

net-snmp-config.h Jun 28

4786a08602e8cff68b7bb7f6e3b30dc746f5677f606d6125dcd2f9d5b2d3301b O(Er)H(Os)

asm-offsets.s Jun 28

a9d3ebd18caaeb07f0197c0bbce0ffcd29a2a1259616175222efa1f55544463e O(Er)H(Os)

40% Linux kernel build artifact

net-snmp-config.h Jun 27

f38945e803d076e724d833c91f3dc25f7ccfa5dd8fe074154c154576feab43da O(Er)H(Os)

asm-offsets.s Jun 27

e4c459f3863b202ff97af7887cec3d7d4baf8a804ab3b7e1352d31baaf16ff81 O(Er)H(Os)

37% Linux kernel build artifact

asm-offsets.s Jun 27

83ac22f6aef81f0b75f367cc5d4b855ff7126dc4822b7ca87fe9357ae9da2d04 O(Er)H(Os)

37% Linux kernel build artifact

yast2-storage-ng 5.0.49-1.1 Jun 26 opensuse

3535b2dcc70237be7020a2828853168f13e56da3250cafaa49a3733d77b8545a O(Er)H(Os)

fprintd 1.94.3-1.debian Jun 26 ubuntu

f5c48ceb05359863740ca1c725816cab065750b86de098de0964145283136776 O(Er)H(Os)

linux-image-6.8.0-1004-raspi 6.8.0-1004.4 Jun 23 ubuntu

1f0cfaf7579e6c3d134595599a45c7ab4d57f95a9ec5ab77ca15fd3e1f252838 O(Er)H(Os)

Windows ⁇⁇⁇⁇⁇!.7z Jun 21

6792453dfe6b1eef4179acdc7102e9739e7b02763a39ed1cad9430aeeaa5e237 O(Er)H(Os)

slopo 0.2.0 Jun 19 python

c5bc3f216ef185b2a6538b9e5e402a1e02f912170a69fec16b19af819b65ba85 O(Er)H(Os)

github.com/DataDog/datadog-agent/pkg/ssi/testutils v0.80.2-rc.1 Jun 15 go

33aa95c3e600fb07912ef87c2d488cc97936d1c0e5ae0875143fbf68b7d73690 O(Er)H(Os)

bbswitch-dkms 0.8-825 Jun 13 arch

7c8c32d1b0d2cd7631dd1627b42639a6c90127e68bda5a7207668109375e3b4c O(Er)H(Os)

syscalls.c Jun 4

7cf6ed9d158aa5ffef272ffb57f353bdbcc42787c1739d30e6565e7dbd55ad68 O(Er)H(Os)

main.c Jun 4

b5f63d816f92898a73f824f05821b088ff32f4b57347e76f576175f33cc1b480 O(Er)H(Os)

PebApi.asm Jun 4

9a41cc230d153ba0da0bd61e94213de9d561e4064aede05c2160f0abf1655054 O(Er)H(Os)

xdp.c Jun 4

3391657037f6d28378d0c0f5b116d653bbb5eab690ca55ed3414f923b50dfa61 O(Er)H(Os)

Uninstall.c Jun 4

283317fce27ff693bfcb306442086145778813133d53d5e9b853c0c8b895e3b9 O(Er)H(Os)

memdlopen.c Jun 4

f5a03d0ce7fac81aba0f7fd9d8830f4cfa2e1d47b3141fb75839bcc2d5b38d0b O(Er)H(Os)

audit_shim.c Jun 4

84f07f584e8fcb96d7fca2db9110a3032375b9d278e9901d07281a75a4155fe0 O(Er)H(Os)

helpers.c Jun 4

3f672526f47f7fb794fed11f1af4dcacfecf8c04d36440c15f953d0329ac42ba O(Er)H(Os)

lkm/headers

bdcore.c Jun 4

7af7584427e6bc0ac70c731279f56cabf5dad3a569be2ada92de154cb89fd66a O(Er)H(Os)

defines.h Jun 4

4771414aba60e7fed96111c0f1359b05cd51a1deaddc12f8ba972ae380c0fde3 O(Er)H(Os)

memod.c Jun 4

d6c8a400c1a55a6fde8676b9f7eb91235a9c1e52edfb76be936d348c84632e90 O(Er)H(Os)

main_so.c Jun 4

2c44efedbf2ec08c128cb8f92031e9902202d3036f4353260bbcf62cb774d71c O(Er)H(Os)

sched.h Jun 4

92622c73743ab9ef7b882d616de618cde5f41d6c58aae22f7f8b7fa2da10dac4 O(Er)H(Os)

config.h Jun 4

ef662c71d0639fb207b9b37cf1ebd784b5f6712b6f2caaabdcd02930d77c4dec O(Er)H(Os)

init.c Jun 4

431e9c604fba3b8e745266dab7f6b2984e16b28fdf93b0f755271605411ea786 O(Er)H(Os)

source.c Jun 4

f5de5facbee91c63427348d7b0f1c9ce6711df42dcae0712f46381dcfef0d374 O(Er)H(Os)

payload_generator.h Jun 4

e2e576fda5c404e8af512f15e16c7b8b6f9d20e9a55a57c35cb64dbb9ad33206 O(Er)H(Os)

keylogger.c Jun 4

0d5cf42f7aaf72941d3305e3db92cb462496bf61735c631a30edb15084d090b5 O(Er)H(Os)

readpid.c Jun 4

0f2214213b1df6fb61360b1211478004893831241c3188956bc4aadef21e407a O(Er)H(Os)

open.c Jun 4

38845532b6db8f227e2ef229083ca20de60c9be97beb59b45c60ed63f90e2233 O(Er)H(Os)

linux.h Jun 4

45f623c6fd5535c8da70db511d178163609fe1048ab08b680f92ea42fbb4eb2b O(Er)H(Os)

netfilter.c Jun 4

48431e89a7e9e878987302efb0578988f45136ad07a50e0354501260a27aa521 O(Er)H(Os)

rootkit.mod.c Jun 4

6f4b3946d1b8a9bcc02bb4ff6070ee2b12da2b8683ceac899ed573ae46a2a05c O(Er)H(Os)

main.c Jun 4

bac135d16bf42d686a623a575724aafaead0fe1cc03ba29a183b18f23d976cd4 O(Er)H(Os)

80% kernel module symbol lookup

network_keylog.c Jun 4

c71f60405dfc1349df5de14354f90865252efc4329c4c217fe42110f475f8c4a O(Er)H(Os)

fork.c Jun 4

eadcb2d94976a68d217559dfdf9b6ce5ab9a07cb40c7808719dcf70fed75f869 O(Er)H(Os)

bbswitch-dkms 0.8-824 Jun 4 arch

682744f011dfe75f637ec57520f92d383a538003109fce85fdc66e68dde594c3 O(Er)H(Os)

tree-sitter-sas 0.4.2 May 25 rust

cb4d6233b3cf8a9d495ecc6ed8fec7e6a29ec15a0c5808ef046504c28e52334c O(Er)H(Os)

tree-sitter-sas 0.4.1 May 25 rust

3d78b755881292910f3a4814b2977acefed8f4fa976f5bd912bd3c52ebd19d7e O(Er)H(Os)

8a479fa2871eb160baa245c96ae3b2a7909b8bd687cb1aaac1c506e230e3fae9.zip May 15

8a479fa2871eb160baa245c96ae3b2a7909b8bd687cb1aaac1c506e230e3fae9 O(Er)H(Os)

dc0db27cba44af2d289845ec99c3fc82e24c1b40efdc88f24279f20b297802f0.apk May 14

dc0db27cba44af2d289845ec99c3fc82e24c1b40efdc88f24279f20b297802f0 O(Er)H(Os)

2b60b3be4225d6bbe43a102c77671d41af3d859c3042f83074fd42c6f9428d53.ps1 May 14

2b60b3be4225d6bbe43a102c77671d41af3d859c3042f83074fd42c6f9428d53 O(Er)H(Os)

a54bd5519da255f1e356aecc1ee07adaa304d817e0dcd7d848d8e54d1c4bfa54.exe May 13

a54bd5519da255f1e356aecc1ee07adaa304d817e0dcd7d848d8e54d1c4bfa54 O(Er)H(Os)

bfee72dc20b2a5766fd1e744a8fdf7213bfed6de0a5b204d69cbbe1d7ac8f5ec.exe May 13

bfee72dc20b2a5766fd1e744a8fdf7213bfed6de0a5b204d69cbbe1d7ac8f5ec O(Er)H(Os)

40d3b699353c2edeeb57a8645f31dcfeb9f8faa55c95ab7701cc798abbbc4e7a.exe May 12

40d3b699353c2edeeb57a8645f31dcfeb9f8faa55c95ab7701cc798abbbc4e7a O(Er)H(Os)

e9e90155c331415ea7cd6adb53d225e31504a0c10a3ef75ef3fad03aaa80bb86.exe May 12

e9e90155c331415ea7cd6adb53d225e31504a0c10a3ef75ef3fad03aaa80bb86 O(Er)H(Os)

e2d87fe6032b08ccce5dfdf82fdc3ac4a0f332ee9734160a0cfa90a064b34c05.exe May 12

e2d87fe6032b08ccce5dfdf82fdc3ac4a0f332ee9734160a0cfa90a064b34c05 O(Er)H(Os)

LinkDialog.cpp May 8 windows

d1857f80099632e3d03ef98e380edce832816d9ae49f5b615a512d67f962af82 O(Er)H(Os)

UpdateGUI.cpp May 8 windows

a818c5360c0890fa687bad88d9e0477ae0adae9817736ab93a1fd4ad2c18b0d9 O(Er)H(Os)

syscalls.cpp May 8 cross-platform

0708fadb24fea2b21bff5617c01500c6ac3704b7220c84e703acfa09cba43c69 O(Er)H(Os)

BasicKeylogger.c May 7 windows

d7f6bb3e10e4e91cba81a6b7bef5c1541f424eb6633ec8b30c41cddaf49e68ba O(Er)H(Os)

syscalls.c May 7 windows

e14a9f2afcf5915630a4c0b6e061bca764dfb41503d4f8e0efd0961b9b3b6299 O(Er)H(Os)

comdefsp.h May 7 windows

cbef3955cde258f6042d1036c18b2d7378ea5dd10cee0f7511f37934c573a4d6 O(Er)H(Os)

Index