Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
32 IOCs
The Gentlemen are knocking: сustom backdoors and evolving tactics
Malware Families
Excerpt
Introduction This year saw the emergence of The Gentlemen, a prominent example of a group operating under the ransomware-as-a-service (RaaS) model. Although our initial assessment suggested the group first appeared in mid-2025, it actually started ramping up its activities at the beginning of 2026. According to public reports , in the first half of 2026, this group ranks among the top 10 ransomware actors by the number of victim announcements on its data leak site (DLS). We…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability(3)
Victim
Indicators of Compromise
Open the mindmap →32 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | adac9984b3cc43d66a0d33079bbec299 | Medium | Score 53/100 | First seen |
| MD5 | edb1c480295250dd1a38f3aa1357deae | Medium | Score 53/100 | First seen |
| MD5 | fdae2beb813778b4540a997706862096 | Medium | Score 53/100 | First seen |
| MD5 | 608faf58353b65c45ef9833358ac3787 | Medium | Score 53/100 | First seen |
| MD5 | 4be8bb62f0ebbcf4ce52c35ab6f794f5 | Medium | Score 53/100 | First seen |
| MD5 | 6ae7c9a7ea0b8c40a64225734f6bd01d | Medium | Score 53/100 | First seen |
| MD5 | 407b6a136bbaa7172eb44ef9d08bb58a | Medium | Score 53/100 | First seen |
| MD5 | b9986a0f1f1f1a798dc3f0c59a80a1a3 | Medium | Score 53/100 | First seen |
| MD5 | b6b51508ad6f462c45fe102c85d246c8 | Medium | Score 53/100 | First seen |
| MD5 | de1522f9219497632f30f8a6e72f26b6 | Medium | Score 53/100 | First seen |
| MD5 | 846dc77c1246db20d976346e0e359502 | Medium | Score 53/100 | First seen |
| MD5 | eef8a950952696b018aa9c6da2f5d7ad | Medium | Score 53/100 | First seen |
| MD5 | b3e418d30312c1b2c58a791286868f42 | Medium | Score 53/100 | First seen |
| MD5 | 3c471ebc947cdf32240a90ffadf49b13 | Medium | Score 53/100 | First seen |
| MD5 | ae0e536766788478263bf448a9381641 | Medium | Score 53/100 | First seen |
| MD5 | d12a5b36dd00586cc374a1cae43efed4 | Medium | Score 53/100 | First seen |
| MD5 | 525ef6014f0ef20e44fe47c1d9980b69 | Medium | Score 53/100 | First seen |
| MD5 | c2764744dcb4b0e1db79ca1e8bf65368 | Medium | Score 53/100 | First seen |
| MD5 | 73f0a8c3ea794a04e80c32038249f044 | Medium | Score 53/100 | First seen |
| MD5 | 8f0577d28c4ff5f71b149f444bfaba8e | Medium | Score 53/100 | First seen |
| MD5 | 3b46a729db7ae6af8b19711c9452194d | Medium | Score 53/100 | First seen |
| MD5 | 5537c708edb9a2c21f88e34e8a0f1744 | High | Score 77/100 | First seen |
| MD5 | 10ca9a4040001560d053b7e7885c1b95 | Medium | Score 53/100 | First seen |
| MD5 | 02944c8a5535cdb5b2cbb893db2d5acf | Medium | Score 53/100 | First seen |
| MD5 | 5f0b2c6d9f442754258bf4dd841c8341 | Medium | Score 53/100 | First seen |
| MD5 | 53c616677bc7e2a0a03127f19166d007 | Medium | Score 53/100 | First seen |
| MD5 | d2f72897e8986303d5567eb2384932b8 | Medium | Score 53/100 | First seen |
| MD5 | 554e699c96b332468f1ae69c1ae81ef9 | Medium | Score 53/100 | First seen |
| MD5 | 5c3b9821fc82a9028cb63b9671950919 | Medium | Score 53/100 | First seen |
| IP | 81.177.215.15 | High | Score 58/100 | First seen |
| MD5 | 5761bd63da03686fc480245da7bd1e9f | Medium | Score 53/100 | First seen |
| MD5 | 9321a61a25c7961d9f36852ecaa86f55 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…