Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Analyzing What Appears to be GNNCRY's macOS Test Build
Malware Families
Excerpt
GonnaCry is a ransomware variant primarily targeting Linux systems. It emerged around 2017 as an open-source proof-of-concept project on GitHub, created by developer Tarcísio Marinho for educational purposes to demonstrate ransomware mechanics, and encryption techniques. However, by 2021, malicious linux variants had appeared in the wild, encrypting user files and demanding cryptocurrency ransoms, leading to detections by antivirus firms. A review of VirusTotal…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 4379a2f58d3088233e7f051d882a9ce934960488aaaba640c26785645bb711c2 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…