Public Export

What you see below are the top 50 entries associated with this search in the Orange Cyberdefense Datalake Threat Intelligence database.
You can download all results in a file in CSV format.

This view is limited, and more information is available with a commercial subscription to the Datalake service. With premium access you are able to see all events associated with an observable, additional intelligence data, DNS telemetry and more.

If you are interested in a premium access, please contact: info.cert@fr.orangecyberdefense.com

Showing: 50 threats out of: 176 results.

Download CSV with all results

THREAT: 47bfa21aaf31f2c1612e395db37b7677

atom details

File: 47bfa21aaf31f2c1612e395db37b7677

First seen: 26 Jun 2023, 03:20:12

Last updated by source: 26 Jun 2023, 03:20:12

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 51

Phishing -

Scan -

Scam -

Spam -

THREAT: 176476f9d924d83343a51a90ade097d12b759...

atom details

File: 176476f9d924d83343a51a90ade097d12b759...

First seen: 28 Nov 2022, 09:12:38

Last updated by source: 28 Nov 2022, 09:12:38

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 48

Phishing -

Scan -

Scam -

Spam -

THREAT: c92c158d7c37fea795114fa6491fe5f145ad2...

atom details

File: c92c158d7c37fea795114fa6491fe5f145ad2...

First seen: 15 Feb 2021, 04:18:40

Last updated by source: 01 May 2021, 00:34:51

Events: 7

Sources: 6

Threat Entities:

Attack Pattern: Application Layer Protocol - T1437

Attack Pattern: Boot or Logon Autostart Execution - T1547

Attack Pattern: Command-Line Interface - T1605

Attack Pattern: Create or Modify System Process - T1543

Attack Pattern: Data Encoding - T1132

Attack Pattern: Hide Artifacts - T1564

Attack Pattern: Native API - T1106

Attack Pattern: Network Share Discovery - T1135

Attack Pattern: Permission Groups Discovery - T1069

Attack Pattern: Phishing - T1566

Attack Pattern: Process Discovery - T1057

Attack Pattern: Query Registry - T1012

Attack Pattern: Remote Services - T1021

Attack Pattern: System Information Discovery - T1082

Attack Pattern: System Network Configuration Discovery - T1016

Attack Pattern: System Owner/User Discovery - T1033

Attack Pattern: Windows Management Instrumentation - T1047

Identity: Chemical

Location: France

Malware: Play ransomware

Threat Actor: Lazarus (umbrella)

Threat Actor: RECESS SPIDER

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 20

Phishing -

Scan -

Scam -

Spam -

THREAT: 51f44e31b0f3718a5d145a1f77fd79cbd7ff2...

atom details

File: 51f44e31b0f3718a5d145a1f77fd79cbd7ff2...

First seen: 28 Nov 2022, 09:12:55

Last updated by source: 28 Nov 2022, 09:12:55

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 48

Phishing -

Scan -

Scam -

Spam -

THREAT: edd2ed2.online

atom details

Domain: edd2ed2.online

First seen: 24 May 2023, 00:00:00

Last updated by source: 09 Aug 2023, 09:41:58

Events: 7

Sources: 6

Threat Entities:

Malware: Play ransomware

Malware: RedLine Stealer

Malware: rilide

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 100

Phishing -

Scan 15

Scam -

Spam -

THREAT: 99f337a4a8f1edf8243e2b64620a1c0f23034d8d

atom details

File: 99f337a4a8f1edf8243e2b64620a1c0f23034d8d

First seen: 25 Apr 2023, 09:41:19

Last updated by source: 25 Apr 2023, 09:41:19

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 100

Phishing -

Scan -

Scam -

Spam -

THREAT: 8de8e3c6661715d635a5f137eeffa0af6668e...

atom details

File: 8de8e3c6661715d635a5f137eeffa0af6668e...

First seen: 27 Jul 2023, 16:04:38

Last updated by source: 27 Jul 2023, 16:04:38

Events: 1

Sources: 1

Threat Entities:

Location: Americas

Location: Jamaica

Location: Sudan

Location: United States of America

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack 65

Leak -

Malware 65

Phishing -

Scan -

Scam -

Spam -

THREAT: https://www.virustotal.com/gui/url/45...

atom details

URL: https://www.virustotal.com/gui/url/45...

First seen: 30 Nov 2015, 15:29:51

Last updated by source: -

Events: 762

Sources: 8

Threat Entities:

Attack Pattern: Phishing - T1566

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack 0

Leak 0

Malware 16

Phishing 15

Scan -

Scam -

Spam -

THREAT: salad-msg.letscall.today

atom details

FQDN: salad-msg.letscall.today

First seen: 10 Jul 2023, 11:40:56

Last updated by source: 23 Aug 2023, 22:11:54

Events: 2

Sources: 2

Threat Entities:

Malware: Demo

Malware: Korean

Malware: Play ransomware

Malware: STOP

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 18

Phishing 18

Scan 2

Scam -

Spam -

THREAT: http://mbrlkbtq5jonaqkurjwmxftytyn2et...

atom details

URL: http://mbrlkbtq5jonaqkurjwmxftytyn2et...

First seen: 14 Dec 2022, 11:40:13

Last updated by source: 14 Dec 2022, 11:40:13

Events: 4

Sources: 4

Threat Entities:

Malware: Play ransomware

Malware: SystemBC

Threat Actor: RECESS SPIDER

Tool: AdFind - S0552

Tool: Mimikatz - S0002

Tool: Net - S0039

Tool: Ping - S0097

Tool: PsExec - S0029

Scores:

DDoS -

Fraud -

Hack 2

Leak -

Malware 3

Phishing 1

Scan -

Scam -

Spam -

THREAT: 5dcfb98d5adf722424420d02377cee54

atom details

File: 5dcfb98d5adf722424420d02377cee54

First seen: 22 Oct 2022, 08:06:05

Last updated by source: 22 Oct 2022, 11:02:58

Events: 2

Sources: 2

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 50

Phishing -

Scan -

Scam -

Spam -

THREAT: 0ed328af77f2576071bfd543938fc01101daa...

atom details

File: 0ed328af77f2576071bfd543938fc01101daa...

First seen: 28 Nov 2022, 09:12:36

Last updated by source: 28 Nov 2022, 09:12:36

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 48

Phishing -

Scan -

Scam -

Spam -

THREAT: 8fd378c323210e9818b7df9574a1ac2c

atom details

File: 8fd378c323210e9818b7df9574a1ac2c

First seen: 16 Oct 2022, 19:35:20

Last updated by source: 16 Oct 2022, 19:35:20

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 24

Phishing -

Scan -

Scam -

Spam -

THREAT: c0eab1dbd64ffbe9c2f77f0e71e30cfff8467...

atom details

File: c0eab1dbd64ffbe9c2f77f0e71e30cfff8467...

First seen: 28 Nov 2022, 09:12:48

Last updated by source: 28 Nov 2022, 09:12:48

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 48

Phishing -

Scan -

Scam -

Spam -

THREAT: fd1bb9d31341c1ab83c1bd8ee21e5520873c8...

atom details

File: fd1bb9d31341c1ab83c1bd8ee21e5520873c8...

First seen: 25 Jul 2023, 07:52:57

Last updated by source: 26 Jul 2023, 02:34:59

Events: 3

Sources: 1

Threat Entities:

Identity: Automotive

Identity: Mining

Identity: Technology

Location: Americas

Location: Argentina

Location: Finland

Location: Germany

Location: Greece

Location: India

Location: Ireland

Location: Italy

Location: Netherlands

Location: Spain

Location: Turkey

Location: United Kingdom of Great Britain and Northern Ireland

Location: United States of America

Malware: Disco

Malware: Play ransomware

Malware: Remcos

Tool: Remcos - S0332

Scores:

DDoS -

Fraud -

Hack 47

Leak -

Malware 47

Phishing -

Scan -

Scam -

Spam -

THREAT: http://k7kg3jqxang3wh7hnmaiokchk7qoeb...

atom details

URL: http://k7kg3jqxang3wh7hnmaiokchk7qoeb...

First seen: 14 Dec 2022, 11:40:13

Last updated by source: 14 Dec 2022, 11:40:13

Events: 4

Sources: 4

Threat Entities:

Malware: Play ransomware

Malware: SystemBC

Threat Actor: RECESS SPIDER

Tool: AdFind - S0552

Tool: Mimikatz - S0002

Tool: Net - S0039

Tool: Ping - S0097

Tool: PsExec - S0029

Scores:

DDoS -

Fraud -

Hack 2

Leak -

Malware 3

Phishing 1

Scan -

Scam -

Spam -

THREAT: 137.220.179.112

atom details

IP: 137.220.179.112

First seen: 10 Jul 2023, 00:39:12

Last updated by source: 10 Jul 2023, 11:40:56

Events: 2

Sources: 2

Threat Entities:

Malware: Demo

Malware: Korean

Malware: Play ransomware

Malware: STOP

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 7

Phishing 7

Scan 17

Scam -

Spam -

THREAT: c59f3c8d61d940b56436c14bc148c1fe98862...

atom details

File: c59f3c8d61d940b56436c14bc148c1fe98862...

First seen: 20 Apr 2023, 12:50:47

Last updated by source: 20 Apr 2023, 12:50:47

Events: 1

Sources: 1

Threat Entities:

Malware: Grixba

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 61

Phishing -

Scan -

Scam -

Spam -

THREAT: 209.250.238.151

atom details

IP: 209.250.238.151

First seen: 22 Jul 2019, 12:05:50

Last updated by source: 27 Jan 2023, 14:23:28

Events: 14

Sources: 9

Threat Entities:

Attack Pattern: Create Account - T1136

Attack Pattern: Data Encrypted for Impact - T1486

Attack Pattern: Data from Local System - T1005

Attack Pattern: Disable or Modify Tools - T1562.001

Attack Pattern: Domain Account - T1087.002

Attack Pattern: Exfiltration Over Unencrypted Non-C2 Protocol - T1048.003

Attack Pattern: Exploit Public-Facing Application - T1190

Attack Pattern: External Remote Services - T1133

Attack Pattern: Impair Command History Logging - T1562.003

Attack Pattern: Lateral Tool Transfer - T1570

Attack Pattern: PowerShell - T1059.001

Attack Pattern: Remote Desktop Protocol - T1021.001

Attack Pattern: Remote System Discovery - T1018

Attack Pattern: SMB/Windows Admin Shares - T1021.002

Attack Pattern: Scheduled Task - T1053.005

Attack Pattern: Service Execution - T1569.002

Attack Pattern: Service Stop - T1489

Malware: Play ransomware

Malware: SystemBC

Threat Actor: RECESS SPIDER

Tool: AdFind - S0552

Tool: BloodHound - S0521

Tool: Mimikatz - S0002

Tool: Net - S0039

Tool: Nltest - S0359

Tool: Ping - S0097

Tool: PsExec - S0029

Scores:

DDoS -

Fraud -

Hack 1

Leak -

Malware 17

Phishing 1

Scan 0

Scam -

Spam -

THREAT: e1c75f863749a522b244bfa09fb694b0cc2ae...

atom details

File: e1c75f863749a522b244bfa09fb694b0cc2ae...

First seen: 07 Sep 2022, 09:24:02

Last updated by source: 14 Dec 2022, 12:29:48

Events: 7

Sources: 7

Threat Entities:

Attack Pattern: Exfiltration Over C2 Channel - T1041

Attack Pattern: Scheduled Task/Job - T1053

Attack Pattern: Valid Accounts - T1078

Malware: Empire

Malware: MimiKatz

Malware: Play ransomware

Malware: PsExec

Threat Actor: RECESS SPIDER

Tool: Empire - S0363

Tool: Mimikatz - S0002

Scores:

DDoS -

Fraud -

Hack 33

Leak -

Malware 45

Phishing 24

Scan -

Scam -

Spam -

THREAT: 335be3b6395618efbc2d24ab01008d7f04c3c...

atom details

File: 335be3b6395618efbc2d24ab01008d7f04c3c...

First seen: 25 Jul 2023, 17:29:08

Last updated by source: 25 Jul 2023, 17:29:08

Events: 1

Sources: 1

Threat Entities:

Identity: Automotive

Identity: Mining

Location: Americas

Location: Finland

Location: Germany

Location: Greece

Location: Ireland

Location: Italy

Location: Turkey

Location: United Kingdom of Great Britain and Northern Ireland

Location: United States of America

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack 65

Leak -

Malware 65

Phishing -

Scan -

Scam -

Spam -

THREAT: 6b44baedbc903551ad3a3ddccc05d6c2c9f50...

atom details

File: 6b44baedbc903551ad3a3ddccc05d6c2c9f50...

First seen: 28 Nov 2022, 09:12:41

Last updated by source: 28 Nov 2022, 09:12:41

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 48

Phishing -

Scan -

Scam -

Spam -

THREAT: e4e3f6f7502011e0db6f182265cd61b47584b...

atom details

File: e4e3f6f7502011e0db6f182265cd61b47584b...

First seen: 28 Nov 2022, 09:12:49

Last updated by source: 28 Nov 2022, 09:12:49

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 48

Phishing -

Scan -

Scam -

Spam -

THREAT: 983ef679211df94aa10d89e297935549

atom details

File: 983ef679211df94aa10d89e297935549

First seen: 25 Sep 2023, 10:13:49

Last updated by source: 25 Sep 2023, 10:27:36

Events: 2

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 70

Phishing -

Scan -

Scam -

Spam -

THREAT: c316627897a78558356662a6c64621ae25c3c...

atom details

File: c316627897a78558356662a6c64621ae25c3c...

First seen: 07 Sep 2022, 09:23:56

Last updated by source: 14 Dec 2022, 12:29:48

Events: 7

Sources: 7

Threat Entities:

Attack Pattern: Exfiltration Over C2 Channel - T1041

Attack Pattern: Scheduled Task/Job - T1053

Attack Pattern: Valid Accounts - T1078

Malware: Empire

Malware: MimiKatz

Malware: Play ransomware

Malware: PsExec

Threat Actor: RECESS SPIDER

Tool: Empire - S0363

Tool: Mimikatz - S0002

Scores:

DDoS -

Fraud -

Hack 33

Leak -

Malware 45

Phishing 24

Scan -

Scam -

Spam -

THREAT: 2e8897ef38d4abe4861360a4b6e895d5

atom details

File: 2e8897ef38d4abe4861360a4b6e895d5

First seen: 16 Oct 2022, 20:20:53

Last updated by source: 28 Jun 2023, 14:27:14

Events: 6

Sources: 4

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 47

Phishing -

Scan -

Scam -

Spam -

THREAT: 9e69416cac3cb428cfb1894fbf7990692978e...

atom details

File: 9e69416cac3cb428cfb1894fbf7990692978e...

First seen: 15 Oct 2022, 10:29:17

Last updated by source: 15 Oct 2022, 10:29:17

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 20

Phishing -

Scan -

Scam -

Spam -

THREAT: slg7tnjb65swwyaebnyymyvo73xm36hxwugds...

atom details

Domain: slg7tnjb65swwyaebnyymyvo73xm36hxwugds...

First seen: 26 Apr 2023, 05:49:02

Last updated by source: 26 Apr 2023, 05:49:02

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Threat Actor: RECESS SPIDER

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 15

Phishing -

Scan -

Scam -

Spam -

THREAT: mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu...

atom details

Domain: mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu...

First seen: 14 Dec 2022, 11:40:13

Last updated by source: 15 Jan 2023, 17:14:31

Events: 6

Sources: 6

Threat Entities:

Malware: Play ransomware

Threat Actor: RECESS SPIDER

Scores:

DDoS -

Fraud -

Hack 0

Leak -

Malware 15

Phishing 0

Scan -

Scam -

Spam -

THREAT: 818720aea07663ffb451f73917ba58da

atom details

File: 818720aea07663ffb451f73917ba58da

First seen: 10 Aug 2022, 00:10:57

Last updated by source: 07 Jul 2023, 19:23:00

Events: 11

Sources: 11

Threat Entities:

Attack Pattern: Exfiltration Over C2 Channel - T1041

Attack Pattern: Scheduled Task/Job - T1053

Attack Pattern: Valid Accounts - T1078

Malware: Empire

Malware: MimiKatz

Malware: Play ransomware

Malware: PsExec

Threat Actor: RECESS SPIDER

Tool: Empire - S0363

Tool: Mimikatz - S0002

Scores:

DDoS -

Fraud -

Hack 33

Leak -

Malware 44

Phishing 24

Scan -

Scam -

Spam -

THREAT: 902b8ae8b5689a73973058fe0fdf606b

atom details

File: 902b8ae8b5689a73973058fe0fdf606b

First seen: 11 Jan 2023, 18:27:12

Last updated by source: 11 Jul 2023, 23:58:36

Events: 2

Sources: 2

Threat Entities:

Attack Pattern: Data Destruction - T1485

Attack Pattern: Data Encrypted for Impact - T1486

Attack Pattern: Double File Extension - T1036.007

Location: Australia

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack 65

Leak -

Malware 60

Phishing -

Scan -

Scam -

Spam -

THREAT: kbakr.com

atom details

Domain: kbakr.com

First seen: 09 Jun 2023, 00:00:00

Last updated by source: 02 Sep 2023, 01:54:21

Events: 23

Sources: 6

Threat Entities:

Identity: Government

Identity: Manufacturing

Identity: Retail

Identity: Technology

Location: Americas

Location: Australia

Location: Czechia

Location: Denmark

Location: Germany

Location: Gibraltar

Location: Greece

Location: Hong Kong

Location: Hungary

Location: India

Location: Iran (Islamic Republic of)

Location: Italy

Location: Jamaica

Location: Netherlands

Location: New Zealand

Location: Peru

Location: Philippines

Location: Poland

Location: Republic of Korea

Location: Romania

Location: Singapore

Location: South Africa

Location: Sudan

Location: Sweden

Location: Thailand

Location: Turkey

Location: United Arab Emirates

Location: United Kingdom of Great Britain and Northern Ireland

Location: United States of America

Location: Zimbabwe

Malware: Disco

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack 24

Leak -

Malware 17

Phishing 0

Scan -

Scam -

Spam -

THREAT: 143.92.34.8

atom details

IP: 143.92.34.8

First seen: 10 Jul 2023, 11:40:56

Last updated by source: 12 Jul 2023, 21:25:38

Events: 2

Sources: 2

Threat Entities:

Malware: Demo

Malware: Korean

Malware: Play ransomware

Malware: STOP

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 10

Phishing 10

Scan 17

Scam -

Spam -

THREAT: f18bc899bcacd28aaa016d220ea8df4db5407...

atom details

File: f18bc899bcacd28aaa016d220ea8df4db5407...

First seen: 07 Sep 2022, 09:24:16

Last updated by source: 14 Dec 2022, 12:29:48

Events: 7

Sources: 7

Threat Entities:

Attack Pattern: Exfiltration Over C2 Channel - T1041

Attack Pattern: Scheduled Task/Job - T1053

Attack Pattern: Valid Accounts - T1078

Malware: Empire

Malware: MimiKatz

Malware: Play ransomware

Malware: PsExec

Threat Actor: RECESS SPIDER

Tool: Empire - S0363

Tool: Mimikatz - S0002

Scores:

DDoS -

Fraud -

Hack 33

Leak -

Malware 45

Phishing 24

Scan -

Scam -

Spam -

THREAT: 163f640487d5566beb0ee8003548694760c1b...

atom details

File: 163f640487d5566beb0ee8003548694760c1b...

First seen: 28 Nov 2022, 09:12:53

Last updated by source: 28 Nov 2022, 09:12:53

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 48

Phishing -

Scan -

Scam -

Spam -

THREAT: 5c94972ddc03292495587955a3aade0d1bd31...

atom details

File: 5c94972ddc03292495587955a3aade0d1bd31...

First seen: 28 Nov 2022, 09:12:40

Last updated by source: 28 Nov 2022, 09:12:40

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 48

Phishing -

Scan -

Scam -

Spam -

THREAT: k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik...

atom details

Domain: k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik...

First seen: 14 Dec 2022, 11:40:13

Last updated by source: 15 Jan 2023, 17:14:30

Events: 5

Sources: 5

Threat Entities:

Malware: Play ransomware

Threat Actor: RECESS SPIDER

Scores:

DDoS -

Fraud -

Hack 0

Leak -

Malware 19

Phishing 0

Scan -

Scam -

Spam -

THREAT: b479c194a24e32c31774ecf2d097d357

atom details

File: b479c194a24e32c31774ecf2d097d357

First seen: 20 Jul 2023, 07:33:38

Last updated by source: 20 Jul 2023, 15:37:00

Events: 7

Sources: 5

Threat Entities:

Identity: Construction

Identity: Government

Location: Americas

Location: Germany

Location: India

Location: Ireland

Location: Netherlands

Location: South Africa

Location: Turkey

Location: United States of America

Malware: Agent Tesla - S0331

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack 65

Leak -

Malware 81

Phishing -

Scan -

Scam -

Spam -

THREAT: 61e83ff804f0a0a48836cc5ad7326846

atom details

File: 61e83ff804f0a0a48836cc5ad7326846

First seen: 24 Mar 2023, 00:11:47

Last updated by source: 20 Apr 2023, 12:50:50

Events: 2

Sources: 2

Threat Entities:

Malware: Grixba

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 61

Phishing -

Scan -

Scam -

Spam -

THREAT: 143.92.34.22

atom details

IP: 143.92.34.22

First seen: 10 Jul 2023, 11:40:56

Last updated by source: 10 Jul 2023, 11:40:56

Events: 1

Sources: 1

Threat Entities:

Malware: Demo

Malware: Korean

Malware: Play ransomware

Malware: STOP

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware -

Phishing -

Scan 17

Scam -

Spam -

THREAT: 157c43a3a4e014827e42cf4dd20cc8efa71cd...

atom details

File: 157c43a3a4e014827e42cf4dd20cc8efa71cd...

First seen: 18 Nov 2022, 22:45:26

Last updated by source: 18 Nov 2022, 22:45:26

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 20

Phishing -

Scan -

Scam -

Spam -

THREAT: fb8535e2bd80cc8044c52a3ed82d390d

atom details

File: fb8535e2bd80cc8044c52a3ed82d390d

First seen: 27 May 2018, 10:25:35

Last updated by source: 13 Sep 2023, 16:03:22

Events: 82

Sources: 10

Threat Entities:

Attack Pattern: Bootkit - T1067

Attack Pattern: Create Account - T1136

Attack Pattern: Data Encrypted for Impact - T1486

Attack Pattern: Data from Local System - T1005

Attack Pattern: Disable or Modify Tools - T1562.001

Attack Pattern: Domain Account - T1087.002

Attack Pattern: Exfiltration Over C2 Channel - T1041

Attack Pattern: Exfiltration Over Unencrypted Non-C2 Protocol - T1048.003

Attack Pattern: Exploit Public-Facing Application - T1190

Attack Pattern: External Remote Services - T1133

Attack Pattern: Impair Command History Logging - T1562.003

Attack Pattern: Lateral Tool Transfer - T1570

Attack Pattern: Modify Registry - T1112

Attack Pattern: PowerShell - T1059.001

Attack Pattern: Query Registry - T1012

Attack Pattern: Remote Desktop Protocol - T1021.001

Attack Pattern: Remote System Discovery - T1018

Attack Pattern: SMB/Windows Admin Shares - T1021.002

Attack Pattern: Scheduled Task - T1053.005

Attack Pattern: Scheduled Task/Job - T1053

Attack Pattern: Service Execution - T1569.002

Attack Pattern: Service Stop - T1489

Attack Pattern: Services Registry Permissions Weakness - T1574.011

Attack Pattern: Valid Accounts - T1078

Attack Pattern: Windows Service - T1543.003

Identity: Agriculture

Identity: Automotive

Identity: Construction

Identity: Energy

Identity: Financial-services

Identity: Government

Identity: Healthcare

Identity: Manufacturing

Identity: Mining

Identity: Retail

Identity: Technology

Identity: Utilities

Location: Americas

Location: Angola

Location: Bangladesh

Location: Brazil

Location: Canada

Location: Chile

Location: Colombia

Location: Ecuador

Location: Egypt

Location: Germany

Location: Greece

Location: India

Location: Indonesia

Location: Malaysia

Location: Mexico

Location: Peru

Location: Poland

Location: Romania

Location: Spain

Location: Thailand

Location: Turkey

Location: United Arab Emirates

Location: United States of America

Location: Viet Nam

Malware: Empire

Malware: MimiKatz

Malware: Play ransomware

Malware: PsExec

Malware: SystemBC

Malware: neshta

Threat Actor: RECESS SPIDER

Tool: BloodHound - S0521

Tool: Empire - S0363

Tool: Mimikatz - S0002

Tool: Nltest - S0359

Tool: PsExec - S0029

Scores:

DDoS -

Fraud -

Hack 47

Leak -

Malware 69

Phishing 24

Scan -

Scam -

Spam -

THREAT: 47318b13af5449b3d165738c68aa6004ea70c...

atom details

File: 47318b13af5449b3d165738c68aa6004ea70c...

First seen: 29 Jul 2023, 16:55:23

Last updated by source: 29 Jul 2023, 16:55:23

Events: 1

Sources: 1

Threat Entities:

Identity: Hospitality-leisure

Location: Americas

Location: United States of America

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack 80

Leak -

Malware 80

Phishing -

Scan -

Scam -

Spam -

THREAT: letscall.39nat.com

atom details

FQDN: letscall.39nat.com

First seen: 10 Jul 2023, 00:39:11

Last updated by source: 10 Jul 2023, 11:40:56

Events: 2

Sources: 2

Threat Entities:

Malware: Demo

Malware: Korean

Malware: Play ransomware

Malware: STOP

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 17

Phishing 17

Scan 20

Scam -

Spam -

THREAT: konan.nicetv.live

atom details

FQDN: konan.nicetv.live

First seen: 10 Jul 2023, 00:39:11

Last updated by source: 23 Aug 2023, 22:11:54

Events: 3

Sources: 2

Threat Entities:

Attack Pattern: Domain Generation Algorithms - T1568.002

Malware: Demo

Malware: Korean

Malware: Play ransomware

Malware: STOP

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 20

Phishing 20

Scan 2

Scam -

Spam -

THREAT: 1409e010675bf4a40db0a845b60db3aae5b30...

atom details

File: 1409e010675bf4a40db0a845b60db3aae5b30...

First seen: 13 Feb 2023, 11:00:00

Last updated by source: 20 Apr 2023, 12:50:51

Events: 1

Sources: 1

Threat Entities:

Malware: Grixba

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 61

Phishing -

Scan -

Scam -

Spam -

THREAT: finda-dl.finda.buzz

atom details

FQDN: finda-dl.finda.buzz

First seen: 31 May 2023, 04:32:25

Last updated by source: 10 Jul 2023, 11:40:56

Events: 2

Sources: 2

Threat Entities:

Malware: Demo

Malware: Korean

Malware: Play ransomware

Malware: STOP

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 0

Phishing 0

Scan 20

Scam -

Spam -

THREAT: zi34ocznt242jallttwvvhihrezjdzfgflf3u...

atom details

Domain: zi34ocznt242jallttwvvhihrezjdzfgflf3u...

First seen: 26 Apr 2023, 05:49:02

Last updated by source: 26 Apr 2023, 05:49:02

Events: 1

Sources: 1

Threat Entities:

Malware: Play ransomware

Threat Actor: RECESS SPIDER

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 15

Phishing -

Scan -

Scam -

Spam -

THREAT: cf7e80fd548260f98cf0453aeb96db65748ec...

atom details

File: cf7e80fd548260f98cf0453aeb96db65748ec...

First seen: 04 Jul 2023, 16:41:37

Last updated by source: 18 Jul 2023, 02:56:25

Events: 3

Sources: 1

Threat Entities:

Identity: Retail

Location: Czechia

Malware: Play ransomware

Scores:

DDoS -

Fraud -

Hack 65

Leak -

Malware 65

Phishing -

Scan -

Scam -

Spam -

THREAT: kics-h5.letscall.fyi

atom details

FQDN: kics-h5.letscall.fyi

First seen: 10 Jul 2023, 00:39:11

Last updated by source: 23 Aug 2023, 22:11:53

Events: 3

Sources: 2

Threat Entities:

Malware: Demo

Malware: Korean

Malware: Play ransomware

Malware: STOP

Scores:

DDoS -

Fraud -

Hack -

Leak -

Malware 18

Phishing 18

Scan 2

Scam -

Spam -