Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA1Signal 53/100
aa9218994798ae31a19d3e7e39cfac2e2ee55840
Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Found in 1 report: Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware
SHA-1 Hash
SHA-1 file hash associated with malicious samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA1
Confidence
73%
Signal Score
53 / 100
IDS Rule
Yes
Threat Context
Feed Intelligence Summary
1 report73% confidence
The DFIR Report
May 11, 2026
20 IOCs in report