Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE2 IOCs
PAYLOAD Ransomware Hijacks Active Directory Group Policy for Encryptionless Extortion
Diamond Model
Indicators of Compromise
Indicators of Compromise2
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 0108656a3e1ade6ca4f21b084f5e1208 exploitfile-hashintel-blog | High | 84 | Sep 22, 26 |
| MD5 | bea5e267f24d7da59f6821bffdbff293 exploitfile-hashintel-blog | High | 56 | Sep 22, 26 |
IOC Relationship Graph
IOC Relationship Graph2 total IOCs
MD5