Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE2 IOCs
Storm-1175 Deploys New StormEncryptor Ransomware, Likely Exploiting N-able Flaw
Malware Families
Diamond Model
Adversary
Infrastructure
Capability(2)
Victim
5W+H Threat Analysis
Analysis unavailable
Indicators of Compromise
Indicators of Compromise2
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-18577 exploitintel-blogmalware | High | 66 | Aug 3, 26 |
| SHA256 | c19ded65e822bb43ad0381c58abf33b7c8890f7bcc7125058a0c849c7e1a6054 exfiltrationfile-hashindicator | Low | 32 | Aug 7, 26 |
IOC Relationship Graph
IOC Relationship Graph2 total IOCs
CVESHA256