✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Rewterz Threat Alert – Remcos RAT – Active IOCs

April 7, 2022
Rewterz

Rewterz Threat Alert – Lokibot Malware – Active IOCs

April 7, 2022

Rewterz Threat Alert – Shiz Malware – Active IOCs

Severity

High

Analysis Summary

Shiz malware is a remote access trojan that allows an attacker to access an infected machine to harvest sensitive information and data. This type of malware enables cybercriminals to gain complete access to infected computers and attempt to hijack the user’s banking account. Cybercriminals use these controls over the infected computer to access the victim’s bank account and transfer money without authorization.

Impact

  • Information theft
  • Exposure of sensitive data

Indicators of Compromise

MD5

  • ea85191c943163a73ef3f84bd94c108a
  • ae4127307e35bfa7083afda0c13e8bb8
  • 749a2bfd9f612b4ed4a341b1b4ba2197

SHA-256

  • c7ef31d850af2919cb0e7d8791dc0cc59368ccfd531ace14ae86ab8f127d5750
  • 1ff0bea7e40ff238bfed20afbf5a58a394cefc06ed3a2b693eabac8ec1c8dbea
  • 21248d64310e76c67652c5fa66dfd9b2bd2f74759d6ad9fac8156903d6459683

SHA-1

  • f880e282c0ffdffecd4b8ac8a5d3634aa9126e22
  • 5fb03df907b901e758a6fe1c7413405d7137aa64
  • e8dba9891d8b9f5aae708dd56d9ba7ee1d53cd48

Remediation

  • Block all threat indicators at your respective controls.
  • Search for IOCs in your environment.

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo