Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
64.227.4.134
https://www.huntress.com/blog/mapping-akira-ransomware-attack
1f1bb322591b6d27fd2946e373d7d2efc2f4e1e66818846060d391600b600fba
d00833318a04caa019c6f95dcb3598ad947d405010bfb2f3cbd04530a00bc3a4
