Top Tweets for #OpsIntel
@LevelBlueCyber #OpsIntel recently identified a new campaign exploiting trusted Electron applications. Victims were lured into executing a JavaScript file that silently downloaded a MSI installer containing a tampered #Exodus Wallet.
The MSI contains a modified #ASAR (Atom Shell Archive), a custom archive format designed specifically for #Electron applications to bundle application resources.
The initial payload is an encrypted PE loader that can be decrypted using AES-256-CBC. Once decrypted, the loader reflectively loads the RAT payload directly into memory.
π§ IOC:
hXXp://35.212.159[.]20/setup2026.msi
e9e5b8e5aa3bf03eca0bda9d1c08f11a70e4d03bbd9e8ac27b2cc7de4f4000c2 (setup2026.msi)
a4e1513e58a5b70389a08714d97c4eb2e22f052856c1471d068451451bfe7840 (exodus_patch.js)
15836a5ab798a5955be566c0322aa9a4140662b91cdda60714ffbe5e57bfcb43 (keystorage.js)
8fa059c30b75233d1e2d1f9b289c899a112a9964a216f0ebc35514ace152a23a (index.js)
eb2d09773e5cb6eecad4bf14ed05b0c885465610a354ea0c9665ffcf56aced18 (app.asar)
56ec5bfb62e9b615b8bb949a76e1d4f6bb3f34983139f0c48cfc73b350961f1c (decrypted buffer)
https://t.co/9q6Qn4Ta7C[.]net
πAES-256-CBC parameters:
Key: KlABCwCvW5oplWMsSxjTlKb0o+iOK6OsxCGZZ0td/1U=
IV: 4b44GYeQwOVmpFKlbWdPVw==
![SpiderLabs's tweet photo. @LevelBlueCyber #OpsIntel recently identified a new campaign exploiting trusted Electron applications. Victims were lured into executing a JavaScript file that silently downloaded a MSI installer containing a tampered #Exodus Wallet.
The MSI contains a modified #ASAR (Atom Shell Archive), a custom archive format designed specifically for #Electron applications to bundle application resources.
The initial payload is an encrypted PE loader that can be decrypted using AES-256-CBC. Once decrypted, the loader reflectively loads the RAT payload directly into memory.
π§ IOC:
hXXp://35.212.159[.]20/setup2026.msi
e9e5b8e5aa3bf03eca0bda9d1c08f11a70e4d03bbd9e8ac27b2cc7de4f4000c2 (setup2026.msi)
a4e1513e58a5b70389a08714d97c4eb2e22f052856c1471d068451451bfe7840 (exodus_patch.js)
15836a5ab798a5955be566c0322aa9a4140662b91cdda60714ffbe5e57bfcb43 (keystorage.js)
8fa059c30b75233d1e2d1f9b289c899a112a9964a216f0ebc35514ace152a23a (index.js)
eb2d09773e5cb6eecad4bf14ed05b0c885465610a354ea0c9665ffcf56aced18 (app.asar)
56ec5bfb62e9b615b8bb949a76e1d4f6bb3f34983139f0c48cfc73b350961f1c (decrypted buffer)
https://t.co/9q6Qn4Ta7C[.]net
πAES-256-CBC parameters:
Key: KlABCwCvW5oplWMsSxjTlKb0o+iOK6OsxCGZZ0td/1U=
IV: 4b44GYeQwOVmpFKlbWdPVw==](https://pbs.twimg.com/media/HSLhTLibYAA5ek7.jpg)
Work has now begun to establish the cause of the fire in Wolverhampton. #999eye footage from @SWMFireControl gave the OIC #OpsIntel before attending at scene. Pictures highlight the spread of damage caused by an open door. @WestMidsFire #nighttimeroutine

Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5Dqnt #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/Sak8zB8V0s #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #CXO
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/DswBrJrPN6 #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Top Things to Look for in a Modern-Day Operational Intelligence System - Coruzant Technologies https://t.co/qGPma5lPvV #EmergingTech #OpsIntel #OperationalIntelligence #AI #MachineLearning #BusinessTransformation #DigitalTransformation #Coruzant #OpsVeda @OpsVeda
Most Popular Users

Elon Musk 
@elonmusk
241.5M followers

Barack Obama 
@barackobama
118.8M followers

Cristiano Ronaldo 
@cristiano
114.5M followers

Donald J. Trump 
@realdonaldtrump
111.8M followers

Narendra Modi 
@narendramodi
107.1M followers

Rihanna 
@rihanna
98.7M followers

NASA 
@nasa
92.3M followers

Justin Bieber 
@justinbieber
91.8M followers

KATY PERRY 
@katyperry
90M followers

Taylor Swift 
@taylorswift13
84M followers

Lady Gaga 
@ladygaga
75.5M followers

Virat Kohli 
@imvkohli
73.5M followers

Kim Kardashian 
@kimkardashian
70.9M followers

YouTube 
@youtube
68.8M followers

Neymar Jr 
@neymarjr
66.5M followers

Bill Gates 
@billgates
65.3M followers

Selena Gomez 
@selenagomez
63.1M followers

The Ellen Show
@theellenshow
62.2M followers

CNN 
@cnn
61.7M followers

X 
@x
60.7M followers

![SpiderLabs's tweet photo. @LevelBlueCyber #OpsIntel recently identified a new campaign exploiting trusted Electron applications. Victims were lured into executing a JavaScript file that silently downloaded a MSI installer containing a tampered #Exodus Wallet.
The MSI contains a modified #ASAR (Atom Shell Archive), a custom archive format designed specifically for #Electron applications to bundle application resources.
The initial payload is an encrypted PE loader that can be decrypted using AES-256-CBC. Once decrypted, the loader reflectively loads the RAT payload directly into memory.
π§ IOC:
hXXp://35.212.159[.]20/setup2026.msi
e9e5b8e5aa3bf03eca0bda9d1c08f11a70e4d03bbd9e8ac27b2cc7de4f4000c2 (setup2026.msi)
a4e1513e58a5b70389a08714d97c4eb2e22f052856c1471d068451451bfe7840 (exodus_patch.js)
15836a5ab798a5955be566c0322aa9a4140662b91cdda60714ffbe5e57bfcb43 (keystorage.js)
8fa059c30b75233d1e2d1f9b289c899a112a9964a216f0ebc35514ace152a23a (index.js)
eb2d09773e5cb6eecad4bf14ed05b0c885465610a354ea0c9665ffcf56aced18 (app.asar)
56ec5bfb62e9b615b8bb949a76e1d4f6bb3f34983139f0c48cfc73b350961f1c (decrypted buffer)
https://t.co/9q6Qn4Ta7C[.]net
πAES-256-CBC parameters:
Key: KlABCwCvW5oplWMsSxjTlKb0o+iOK6OsxCGZZ0td/1U=
IV: 4b44GYeQwOVmpFKlbWdPVw==](https://pbs.twimg.com/media/HSLhQ8EXQAAWAjA.jpg)





