IOC Radar
TLP:WHITE2 IOCs

Spirals Attackers Disable Windows Defender and Kill Backup Services Before Encrypting Systems

CP
Cyber Press
Published July 17, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYHiveINFRASTRUCTUREunknownCAPABILITYChiselHivePsExecVICTIMunknown
Adversary(1)
Infrastructure
Capability(3)
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise2

TypeIndicatorConfidenceScoreFirst Seen
SHA2564cab935d0ec400059a3fcdc95b6623efdd51a61dff401fba8d5da244cc2de649
file-hashindicatorintel-blog
Medium
45
Jul 17, 26
SHA2560f9574dc38e5c34a31153f0bcc603c6ec29cb3bf65c3d25380dbe86d42573141
file-hashindicatorintel-blog
Medium
45
Jul 17, 26

IOC Relationship Graph

IOC Relationship Graph2 total IOCs
SHA256
SHA2562Actors1Malware3REPORTSpirals Attackers Disable HiveChiselHivePsExec
scroll to zoom · drag to pan · click IOC to open