IOC Radar
TLP:WHITE8 IOCs

The Gentlemen Ransomware Affiliate Deploys EtherRAT via Ethereum Smart Contract C2

CP
Cyber Press
Published August 5, 2026Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREresumeacceptable.com193.233.202.17publisherresolution.c…CAPABILITYChiselLigoloMimikatzVICTIMunknown
Adversary
Infrastructure(6)
Capability(4)
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise8

TypeIndicatorConfidenceScoreFirst Seen
Domainresumeacceptable.com
intel-blogmalwarenetwork
High
58
Aug 5, 26
IP193.233.202.17
intel-blogmalwarenetwork
High
58
Aug 5, 26
Domainpublisherresolution.com
intel-blogmalwarenetwork
High
58
Aug 5, 26
Domainwiselystarting.com
botnetintel-blogmalware
High
86
Jul 2, 26
Domainitemrange.com
botnetintel-blogmalware
High
86
Jul 2, 26
Domainsimultaneouslypower.com
botnetexploitintel-blog
High
86
Jun 17, 26
SHA1b3f2897f2bc797e5b9033faef8c81e92b01cb831
file-hashintel-blogmalware
Medium
53
Aug 5, 26
IP77.110.122.137
abusealienvault_ransomwareapt
Medium
55
May 23, 26

IOC Relationship Graph

IOC Relationship Graph8 total IOCs
DomainIPSHA1
Domain5IP2SHA11Malware4REPORTThe Gentlemen Ransomware AChiselLigoloMimikatzSliver
scroll to zoom · drag to pan · click IOC to open