Indicator
Type sha1 · source AlienVault OTX
Verdict
KNOWN MALWARE — Purerat
What this is
SHA1 observable 9db9b3e55f58553735a25db6702d272c…
Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access
Threat detail
Exploitation status and malware-family attribution from stored fields.
Graph preview
Neighborhood topology — open the graph for interactive pivots.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Structured pivots from local graph context.
See edges, pivots, and corroboration at a glance.
Full inspector with neighbor expansion.