TLP:WHITE25 IOCs

Toy Ghouls’ new toy: the GenieLocker ransomware

Securelist

Published July 30, 2026Original Report

Threat Actors

Malware Families

Diamond Model

Adversary(1)

Infrastructure(1)

Capability(3)

Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise25

Type	Indicator	Confidence	Score	First Seen
MD5	c68b6862725777651085650db34947fc abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	d3e06eb34d8eee7ef92cac3ad0a20ff5 abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	824ca1e906cc073ee5b0f3519df69a8f abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
IP	89.125.66.101 abusealienvault_ransomwarebabuk	High	66	Jul 29, 26
MD5	9969a8221312dba70dd5cbddf83a146c abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	a8842616c9057d5cf6e1fe1fa8c3c160 abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	58c0dda52b8f069660166d61fd74f911 abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	d661cf666b9acbab7cfeae1127a261a9 exploitfile-hashintel-blog	High	56	Jul 30, 26
MD5	780c8f4c6f077da4da96582987920362 abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	7dad78584795aa5c160520cc6accf260 abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	3a4479b51890373bfc4a011ef41fe376 abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	18f61c6d686cffd131c9fd3f3437064b abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	f08f476f26b01d142ca73923de65fc0c abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	fd46a80c2f45577263328984edf7f4dc abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	de3cfbb50f66079bfee20a6f64e59433 abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	34b8828635f88078735799a3c1ac8e28 abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	5d62c1349b8981c396c9a23f4f8f053c abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	a50eaaf514f4f84e61ca2455a8789753 exploitfile-hashintel-blog	High	56	Jul 30, 26
MD5	d87d0b01d95acc936b7dc47b8f41937a abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	9cd514ff2809ce0b993e3b8649e82a94 abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	9201e35e2993612612919a3c71302cab file-hashintel-blogmalware	High	56	Jul 30, 26
MD5	34a7f28e0bb69b0d49bacc88bdf20ac1 abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	b893eafed0659f70d4ac250f09073723 abusealienvault_ransomwarebabuk	Medium	58	Apr 2, 26
MD5	f7b9e36e94163a9a303160945f99267a abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26
MD5	25480dad40152ef3d0c6d38eecc9bd9b abusealienvault_ransomwarebabuk	Medium	50	Jul 30, 26

IOC Relationship Graph

IOC Relationship Graph25 total IOCs

MD5IP

scroll to zoom · drag to pan · click IOC to open