medium
advisory
Supper Malware Indicators
ThreatFox has reported three new file hashes associated with the Windows Supper malware family.
Triage facts
Revision 1- Applicability
- Windows
- Evidence
- Unknown
- Severity
- Medium
- Action
- Elevated
- Sources
- 2 public sources
- Freshness
- Revision 1Nov 5, 13:42 UTC
- Detection
- 2 IOCs
- Source quality
- A1Roughly even chance
ThreatFox and Malpedia have documented three new indicators of compromise for the Supper malware family, which targets Windows environments. These indicators, reported on November 4, 2026, consist of MD5, SHA1, and SHA256 hashes of the malicious payload. No specific delivery mechanism, actor attribution, or exploitation path is disclosed in this report.
Recommendation
- Ingest the SHA-256 and MD5 hashes provided in the IOC table into your endpoint detection and response (EDR) or antivirus solutions to identify potential infections.
- Perform a retrospective search of endpoint process telemetry or file integrity logs for the presence of these hashes.
Immediate actions
Block the provided hashes on all endpoints
SOC
24h
Threat Hunt
Search for execution of files matching the provided hashes
high
high confidence
hunt now
Data: Endpoint file execution logs
Indicators of compromise
1
hash_md5
1
hash_sha256
| Type | Value |
|---|---|
| hash_md5 | 60e4cb95f00c6ea4f52d9dc68e4905b2 |
| hash_sha256 | 28c09862bfc850120201e22988176ce41900b491c064b61174f29aa6578f29ac |