Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
25 IOCs
Toy Ghouls’ new toy: the GenieLocker ransomware
Threat Actors
Malware Families
Excerpt
Introduction The new GenieLocker ransomware family has been active since March 2026. It has been used in attacks against organizations in the Russian Federation, primarily in the manufacturing sector, and attributed to the Toy Ghouls group by open-source intelligence (link in Russian). The Toy Ghouls, also known as Bearlyfy, Labubu and Laboo.boo, is a financially motivated extortion group, which previously relied on third-party encryption Trojans like RedAlert, LockBit, and…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(1)
Capability(3)
Victim
Indicators of Compromise
Open the mindmap →25 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | c68b6862725777651085650db34947fc | Medium | Score 50/100 | First seen |
| MD5 | d3e06eb34d8eee7ef92cac3ad0a20ff5 | Medium | Score 50/100 | First seen |
| MD5 | 824ca1e906cc073ee5b0f3519df69a8f | Medium | Score 50/100 | First seen |
| IP | 89.125.66.101 | High | Score 66/100 | First seen |
| MD5 | 9969a8221312dba70dd5cbddf83a146c | Medium | Score 50/100 | First seen |
| MD5 | a8842616c9057d5cf6e1fe1fa8c3c160 | Medium | Score 50/100 | First seen |
| MD5 | 58c0dda52b8f069660166d61fd74f911 | Medium | Score 50/100 | First seen |
| MD5 | d661cf666b9acbab7cfeae1127a261a9 | High | Score 56/100 | First seen |
| MD5 | 780c8f4c6f077da4da96582987920362 | Medium | Score 50/100 | First seen |
| MD5 | 7dad78584795aa5c160520cc6accf260 | Medium | Score 50/100 | First seen |
| MD5 | 3a4479b51890373bfc4a011ef41fe376 | Medium | Score 50/100 | First seen |
| MD5 | 18f61c6d686cffd131c9fd3f3437064b | Medium | Score 50/100 | First seen |
| MD5 | f08f476f26b01d142ca73923de65fc0c | Medium | Score 50/100 | First seen |
| MD5 | fd46a80c2f45577263328984edf7f4dc | Medium | Score 50/100 | First seen |
| MD5 | de3cfbb50f66079bfee20a6f64e59433 | Medium | Score 50/100 | First seen |
| MD5 | 34b8828635f88078735799a3c1ac8e28 | Medium | Score 50/100 | First seen |
| MD5 | 5d62c1349b8981c396c9a23f4f8f053c | Medium | Score 50/100 | First seen |
| MD5 | a50eaaf514f4f84e61ca2455a8789753 | High | Score 56/100 | First seen |
| MD5 | d87d0b01d95acc936b7dc47b8f41937a | Medium | Score 50/100 | First seen |
| MD5 | 9cd514ff2809ce0b993e3b8649e82a94 | Medium | Score 50/100 | First seen |
| MD5 | 9201e35e2993612612919a3c71302cab | High | Score 56/100 | First seen |
| MD5 | 34a7f28e0bb69b0d49bacc88bdf20ac1 | Medium | Score 50/100 | First seen |
| MD5 | b893eafed0659f70d4ac250f09073723 | Medium | Score 58/100 | First seen |
| MD5 | f7b9e36e94163a9a303160945f99267a | Medium | Score 50/100 | First seen |
| MD5 | 25480dad40152ef3d0c6d38eecc9bd9b | Medium | Score 50/100 | First seen |
IOC Relationship Graph
Building graph…