Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
33 IOCs

Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

The DFIR Report
The DFIR Report
Published September 8, 2025Original Report

Threat Actors

Malware Families

Excerpt

Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs - The DFIR Report Read our latest report Click here X Public Reports Products Products Overview Threat Intel Threat Feed Private DFIR Reports All Intel Active Defense DFIR Labs Case Artifacts - Detection Pack AI Training Ground - bruteratel From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion Read More - dragonforce Blurring the Lines: Intrusion Shows Connection With Three…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAkiraLockBitPlayINFRASTRUCTURE504ec1c95.host.njalla…504e1c95.host.njalla.…45.141.87.55CAPABILITYADFindAkiraBloodHoundVICTIMunknown
Adversary(3)
Infrastructure(3)
Capability(16)
Victim

Indicators of Compromise

Open the mindmap →

33 indicators

TypeIndicatorConfidenceScoreFirst Seen
MD5abb2a6a0f771ab20ce2037d2c4ef5783MediumScore 53/100First seen
MD512011c44955fd6631113f68a99447515MediumScore 53/100First seen
SHA2566f9326224e6047458e692cd27aeb1054b9381c67aaf2fe238dbebfbc916c4b33MediumScore 53/100First seen
SHA256e1521e077079032df974c7ae39e4737cdb4f05c6ded677ed5446167466eeb899MediumScore 53/100First seen
SHA152332ce16ee0c393b8eea6e71863ad41e3caeafdMediumScore 53/100First seen
MD5829a9dfd2cdcf50519a1cec1f529854bMediumScore 53/100First seen
SHA1d15d45d9d9a8ef7a9f048d74b386f620f3b82576MediumScore 53/100First seen
SHA12114d655805f465d11b720830d150c145039bcd4MediumScore 53/100First seen
SHA1ac0fcbc148e45e172c9be0acf9c307186f898803MediumScore 53/100First seen
SHA256f8810179ab033a9b79cd7006c1a74fbcde6ed0451c92fbb8c7ce15b52499353aMediumScore 53/100First seen
SHA25618f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566HighScore 85/100First seen
SHA256c92c158d7c37fea795114fa6491fe5f145ad2f8c08776b18ae79db811e8e36a3MediumScore 53/100First seen
Domain504ec1c95.host.njalla.netHighScore 58/100First seen
SHA168b6d0cc1430e2d4f70e2ba5026d1c4847324269MediumScore 53/100First seen
MD595c96de7dcb5a643559ac66045559cc9MediumScore 53/100First seen
Domain504e1c95.host.njalla.netHighScore 58/100First seen
MD588df27b6e794e3fd5f93f28b1ca1d3d0MediumScore 53/100First seen
MD527f7186499bc8d10e51d17d3d6697bc5MediumScore 53/100First seen
MD5e963d598a86c5ee428a2eefa34d1ffbbMediumScore 53/100First seen
MD5c6f92d1801d7d212282a6dd8f11b44feMediumScore 53/100First seen
SHA1f24fc14f39c160b54dc3b2fbd1eba605ec0eb04fMediumScore 53/100First seen
SHA256ae7c31d4547dd293ba3fd3982b715c65d731ee07a9c1cc402234d8705c01dfcaMediumScore 53/100First seen
MD571f703024c3d3bfc409f66bb61f971a0MediumScore 53/100First seen
SHA256bcff246f0739ed98f8aa615d256e7e00bc1cb24c8cabaea609b25c3f050c7805MediumScore 53/100First seen
IP45.141.87.55HighScore 58/100First seen
SHA14f4f8cf0f9b47d0ad95d159201fe7e72fbc8448dMediumScore 53/100First seen
SHA256aeaf7cc7364a44b381af9f317fe6f78c2717217800b93bee8839ab3e56233254MediumScore 53/100First seen
SHA1142294249feb536e0edbe6e2de3eb3c3415ecf39MediumScore 53/100First seen
SHA256a7240d8a7aee872c08b915a58976a1ddee2ff5a8a679f78ec1c7cf528f40deedMediumScore 53/100First seen
SHA1c0e5e4b5fcbd0a30b042e602d99a6ee81ad5d8d7MediumScore 53/100First seen
SHA15bf41754bfb3a18611b2a02f7f385960ed24f8e1MediumScore 53/100First seen
SHA256a4bc6bebabb52ed9816987b77ebae6ef70e174533a643aea6265bdf1ed9b8952MediumScore 53/100First seen
MD55675a7773f6d3224bfefdc01745f8411MediumScore 53/100First seen

IOC Relationship Graph

Building graph…