Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
5 IOCs
New SETTRA Ransomware Wipes Recovery Options Before Locking Windows Files
Excerpt
Security researchers have uncovered new details about Settra ransomware, a recently observed Windows threat that attempts to destroy recovery options before encrypting files. Huntress investigated two Settra incidents, one targeting a consumer services and retail organization in July and another affecting a manufacturing company in September. Settra was first publicly identified in June. Earlier reporting linked the group to compromised VPN services and stolen credentials.…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Open the mindmap →5 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 45.13.122.7 | High | Score 58/100 | First seen |
| MD5 | 3eb6f92aedf74f109c7b4b0897ec39a8 | High | Score 81/100 | First seen |
| MD5 | a77095b3011b4968a0d266b7687c3320 | Medium | Score 53/100 | First seen |
| IP | 193.5.65.114 | High | Score 58/100 | First seen |
| MD5 | b34c9396f612482ca0ef90dabc775a49 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…