Dohdoor Campaign IOCs

Elgonad .@elgonad

•updated Feb 26, 2026•2•0•25

Detects known file hashes and C2 domains associated with the Dohdoor malware campaign. This rule combines file and network indicators; it may need to be split into two separate rules (e.g., for file events and network events) depending on the SIEM implementation.