Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
13 IOCs
Cat’s Got Your Files: Lynx Ransomware
Threat Actors
Malware Families
Excerpt
Cat’s Got Your Files: Lynx Ransomware - The DFIR Report Read our latest report Click here X Public Reports Products Products Overview Threat Intel Threat Feed Private DFIR Reports All Intel Active Defense DFIR Labs Case Artifacts - Detection Pack AI Training Ground - bruteratel From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion Read More - dragonforce Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs Read More Services…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(4)
Capability(10)
Victim
Indicators of Compromise
Open the mindmap →13 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA1 | efe8b9ff7ff93780c9162959a4c1e5ecf6e840a4 | Medium | Score 53/100 | First seen |
| SHA256 | 517288e12c05a92e483e6d80b9136c19bc58c46851720680bb6d1b7016034c37 | Medium | Score 53/100 | First seen |
| IP | 77.90.153.30 | High | Score 76/100 | First seen |
| Domain | temp.sh | High | Score 67/100 | First seen |
| MD5 | 3073af95dfc18361caebccd69d0021a2 | Medium | Score 53/100 | First seen |
| Domain | delete.me | Medium | Score 68/100 | First seen |
| MD5 | 7532ff90145b8c59dc9440bf43dc87a5 | Medium | Score 53/100 | First seen |
| SHA256 | 07b36c1660deb223749a8ac151676d8924bc13aa59e6712a3c14a2df5237264a | Medium | Score 53/100 | First seen |
| SHA256 | 6285d32a9491a0084da85a384a11e15e203badf67b1deed54155f02b7338b108 | Medium | Score 53/100 | First seen |
| SHA1 | 3e01df0155a539fe6d802ee9e9226d8c77fd96c9 | Medium | Score 53/100 | First seen |
| MD5 | e2179046b86deca297ebf7398b95e438 | Medium | Score 53/100 | First seen |
| IP | 195.211.190.189 | High | Score 76/100 | First seen |
| SHA1 | 2b4b11d3ecffd82ed44db652cdd65733224f8e34 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…