Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Malware Families
Excerpt
Author: S2W TALON (Byeongyeol An) First Published: Jan 14, 2026 This Figure was generated using Google Gemini Nano Banana Executive Summary (Introduction) The DragonForce Ransomware Group, first detected in December 2023, developed its own ransomware based on LockBit 3.0 (Black) and Conti Ransomware code. - This group operates a service called “Ransombay”, which allows affiliates to choose options such as receiving customized payloads, and refers to itself as a cartel. (Other…
Read the original report →Diamond Model
Adversary(2)
Infrastructure
Capability(5)
Victim
Indicators of Compromise
Open the mindmap →5 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 410db536a57c511b0ccac2639e0eb3320f303fc5c90242379ab43364c51ef321 | Medium | Score 53/100 | First seen |
| MD5 | a368564c74d7f288fa01e4c7241082fe | Medium | Score 53/100 | First seen |
| SHA256 | 451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20 | Medium | Score 53/100 | First seen |
| MD5 | ada4e228e982a7e309bb6a3308e4872d | Medium | Score 53/100 | First seen |
| SHA256 | dc7e706587d4897789cc4a5f7cccbb539646b58aa9c86272728c8c1e6ec2a529 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…