Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
24 IOCs
New Cross-Platform Ransomware Encrypts Windows, Linux, and VMware Infrastructure
Threat Actors
Malware Families
Excerpt
A newly identified ransomware family, dubbed GenieLocker, is enabling cross-platform attacks across Windows, Linux, and VMware ESXi environments , marking a significant evolution in the Toy Ghouls threat group’s tooling. First observed in March 2026, the malware has been observed targeting organizations primarily in the manufacturing sector and has demonstrated a clear shift toward custom-built ransomware capabilities. GenieLocker represents a departure from Toy Ghouls’…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(3)
Victim
Indicators of Compromise
Open the mindmap →24 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | c68b6862725777651085650db34947fc | Medium | Score 50/100 | First seen |
| MD5 | d3e06eb34d8eee7ef92cac3ad0a20ff5 | Medium | Score 50/100 | First seen |
| MD5 | 824ca1e906cc073ee5b0f3519df69a8f | Medium | Score 50/100 | First seen |
| MD5 | 9969a8221312dba70dd5cbddf83a146c | Medium | Score 50/100 | First seen |
| MD5 | a8842616c9057d5cf6e1fe1fa8c3c160 | Medium | Score 50/100 | First seen |
| MD5 | 58c0dda52b8f069660166d61fd74f911 | Medium | Score 50/100 | First seen |
| MD5 | d661cf666b9acbab7cfeae1127a261a9 | High | Score 56/100 | First seen |
| MD5 | 780c8f4c6f077da4da96582987920362 | Medium | Score 50/100 | First seen |
| MD5 | 7dad78584795aa5c160520cc6accf260 | Medium | Score 50/100 | First seen |
| MD5 | 3a4479b51890373bfc4a011ef41fe376 | Medium | Score 50/100 | First seen |
| MD5 | 18f61c6d686cffd131c9fd3f3437064b | Medium | Score 50/100 | First seen |
| MD5 | f08f476f26b01d142ca73923de65fc0c | Medium | Score 50/100 | First seen |
| MD5 | fd46a80c2f45577263328984edf7f4dc | Medium | Score 50/100 | First seen |
| MD5 | de3cfbb50f66079bfee20a6f64e59433 | Medium | Score 50/100 | First seen |
| MD5 | 34b8828635f88078735799a3c1ac8e28 | Medium | Score 50/100 | First seen |
| MD5 | 5d62c1349b8981c396c9a23f4f8f053c | Medium | Score 50/100 | First seen |
| MD5 | a50eaaf514f4f84e61ca2455a8789753 | High | Score 56/100 | First seen |
| MD5 | d87d0b01d95acc936b7dc47b8f41937a | Medium | Score 50/100 | First seen |
| MD5 | 9cd514ff2809ce0b993e3b8649e82a94 | Medium | Score 50/100 | First seen |
| MD5 | 9201e35e2993612612919a3c71302cab | High | Score 56/100 | First seen |
| MD5 | 34a7f28e0bb69b0d49bacc88bdf20ac1 | Medium | Score 50/100 | First seen |
| MD5 | b893eafed0659f70d4ac250f09073723 | Medium | Score 58/100 | First seen |
| MD5 | f7b9e36e94163a9a303160945f99267a | Medium | Score 50/100 | First seen |
| MD5 | 25480dad40152ef3d0c6d38eecc9bd9b | Medium | Score 50/100 | First seen |
IOC Relationship Graph
Building graph…