Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
ToolMalware Family
Active Threat
Procdump
75
IOCs Tracked
2026
First Seen
Oct 9, 2026
Last Seen
0
YARA Rules
Associated IOCs75 total · showing 50
IP4
64.227.4.1342026-10-09High
144.31.221.1372026-10-09High
144.31.221.842026-10-09High
195.66.27.922026-10-09High
Domain18
windlrr.com2026-10-09High
notawordapp.com2026-06-02High
crystalpdf.com2026-06-02High
onezipapp.com2026-06-02High
pdfclickapp.com2026-06-02High
ez2convertapp.com2026-06-02High
pdfskillsapp.com2026-06-02High
dcownil.com2026-06-02High
pdfsparkware.com2026-06-02High
lukgiop.com2026-06-02High
pokemoninfinitefusion.net2026-06-02High
convertmasterapp.com2026-06-02High
zappdfapp.com2026-06-02High
convertyfileapp.com2026-06-02High
conmateapp.com2026-06-02High
zipmatepro.com2026-06-02High
powerdocapp.com2026-06-02High
infinitedocsapp.com2026-06-02High
URL16
https://www.huntress.com/blog/mapping-akira-ransomware-attack2026-10-09High
http://144.31.221.84:5555/notify2026-10-09High
http://144.31.221.84:5555/test8882026-10-09High
https://pcdcinc.com/js.php2026-10-09High
https://plein-soleil.top/m2026-10-09High
https://www.updater-worelos.com/lsdkfhnwoiu.pdf2026-10-09High
https://defs.updater-worelos.com/0oIWAdtB2AUftpdExh1C2026-10-09High
http://144.31.221.84:5555/nothing0002026-10-09High
https://oeannon.com/t22026-10-09High
https://plein-soleil.top/o2026-10-09High
https://plein-soleil.top/final102026-10-09High
https://pcdcinc.com/6n7n.js2026-10-09High
http://144.31.221.84:5555/code7772026-10-09High
https://confetly.com/auth2026-06-02High
https://confetly.com/is5m2026-06-02High
https://confetly.com/update2026-06-02High
SHA2562
1f1bb322591b6d27fd2946e373d7d2efc2f4e1e66818846060d391600b600fba2026-10-09High
d00833318a04caa019c6f95dcb3598ad947d405010bfb2f3cbd04530a00bc3a42026-10-09High
SHA110
4217bac417f82cc3416acd4e3954dd17a1e8e23d2026-06-02Medium
d8263a1ea0c4d119c5346e1b26200377283774f42026-06-02Medium
3b5253a4853056458675b5cb1903c05bc2dbbd1b2026-06-02Medium
e3efccb48a282fe2091cba889d79bf65def496072026-06-02Medium
f38b5e3a3a9807a36bc947b75bf14bc8091c83a72026-06-02Medium
a6bd7b323d3135e4f13f5c198ea23163d622b5382026-06-02Medium
8d4fb4a66fd31e36515b5e54d48f31b7715b8af92026-06-02Medium
fe8ac01467f8e21806ba338e69df21b5b7e74e782026-06-02Medium
ece7440c53c235e5e69e57eacb9250154af20de02026-06-02Medium
02c4b0c7438f3ae718ffa47137b75151713f38ea2026-06-02Medium
Related Reports4 shown
XorBee RAT
Randy McEoinApr 13, 2026
Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack
ORKL Threat Library
Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack
HuntressOct 6, 2026
Free Converter Software – Convert Any System from Clean to Infected in Seconds
Nextron SystemsJan 14, 2026
Threat Profile
TypeTool
StatusActive
First SeenJun 2, 2026
Last SeenOct 9, 2026
IOCs tracked75