Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
18 IOCs
From Payment Plan to Ransomware - Inside a Global Group Attack
Excerpt
By: Iris Suaner, Cofense Phishing Defense Center Highly sophisticated ransomware now targets industries worldwide. Today’s ransomware allows threat actors to infiltrate networks, encrypt confidential data, and hold critical systems hostage until a cryptocurrency ransom is paid. Worse, threat actors often employ “double extortion” techniques by stealing sensitive company data and threatening to publish data publicly if the ransom is not paid. By weaponizing a company’s digital…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →18 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 1e2c4cd35987ee217994149675784f9f | Medium | Score 53/100 | First seen |
| URL | https://globalsupportupdate.top | High | Score 58/100 | First seen |
| SHA256 | 9fb468a79f88d9a250180749bfae97d4f310c8510f1f98cae359d95c2a62b4af | Medium | Score 53/100 | First seen |
| URL | https://driverupdate.sbs/access.php?t=notes-a408df | High | Score 58/100 | First seen |
| URL | https://driverupdate.sbs/access.php | High | Score 58/100 | First seen |
| SHA256 | 00f70ae018e71f51060346aaa101209c24e34697bbfafec6b3612db8d8127cb2 | Medium | Score 53/100 | First seen |
| URL | https://globalsupportupdate.top/enc.exe | High | Score 86/100 | First seen |
| SHA256 | 64388cdbfe48dcff05eaa455892bcb3bfcaa3d43559eb7c65f6ac772810be61e | Medium | Score 53/100 | First seen |
| URL | https://playmounthdom.top/ | High | Score 86/100 | First seen |
| MD5 | 5dee17e91f79be742881324bcdf139a5 | Medium | Score 53/100 | First seen |
| SHA256 | d5004e079cb46db15a7d0b7ecebfa47bb8a1bc19e25749849a017b2a36705260 | Medium | Score 53/100 | First seen |
| SHA256 | 997cf28771fde81c6bfc067eed1f19d0ad3554342d63d9469d3adcdc1ca0ff31 | Medium | Score 53/100 | First seen |
| MD5 | 9db4b94589728b68d51bf83a90211cfe | Medium | Score 53/100 | First seen |
| IP | 172.67.188.157 | High | Score 58/100 | First seen |
| IP | 104.21.92.70 | High | Score 58/100 | First seen |
| IP | 172.67.175.15 | High | Score 58/100 | First seen |
| MD5 | 2abd445d3d60fd207b2c62bb0da3a42b | Medium | Score 53/100 | First seen |
| MD5 | 20417846820741fa84c4571affb40e9c | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…