0b3220b11698b1436d1d866ac07cc90018e59884e91a8cb71ef8924309f1e0e9

SHA256 of a LEMURLOOT web-shell ASPX sample listed in the MOVEit Campaign IOC table of AA23-158A; one of the ~40 hashes the FBI/CISA released June 7, 2023 covering TA505 web-shell deployments against MOVEit Transfer.

family

LEMURLOOT

first seen

May 26, 2023

publisher

CISA