IOC Radar Logo
IOCRadar
IOC Radar Logo
IOCRadar

00bbaa6728ac7a888c7da2ddcc886ad276f4b0e87c93990cc5fa79d583093119

Hash
18%
SIGNAL STRENGTHSlightly Noisy
FIRST SEEN2025-03-26 02:43:15
LAST SEEN2025-03-29 17:39:01
CATEGORY
malware
region spesific attack(europe)
data leak - election data
MITRE
T1078 - Valid Accounts
T1496 - Resource Hijacking
T1566 - Phishing
T1190 - Exploit Public-Facing Application
T1003 - OS Credential Dumping
T1055 - Process Injection
T1486 - Data Encrypted for Impact
T1565 - Data Manipulation
T1071.001 - Web Protocol
T1499.002 - Endpoint DoS
TAGS
distributed attacks
command and control
malicious software
regional security
credential theft
eu cyber policies
process injection
data exfiltration
pii exposure
botnet
Eye Icon
SOCRadar
AI Insight

The presence of the SHA256 hash 00bbaa6728ac7a888c7da2ddcc886ad276f4b0e87c93990cc5fa79d583093119 represents a critical threat, potentially indicative of a Revil ransomware infection within the environment. This ransomware strain is known for its aggressive encryption and data exfiltration tactics, posing a significant risk of data loss, operational disruption, and reputational damage. The connection to the "win.revil - 02.23.25" AlienVault OTX pulse and reports on VirusTotal further substantiates this threat, necessitating immediate action to contain and mitigate the potential impact of a Revil ransomware attack.

Summary

Hash Type:
sha256
MD5:
-
SHA-1:
-
SHA-256:
-
Files:
-
File Type:
-

Top Classifications

Campaign:
-
Industry:
-
Country:
-
Region:
-
Threat Actors:
-
Malware:
-

Feed Sources

Feed Source
Count
Date
AlienVault OTX Feeds
3
2025-03-29

Threat Activity Timeline

Last 24 hours
Dormant
Last 7 Days
Dormant
Last Month
Minimal Activity
Last 3 Months
Minimal Activity
Extended Threat Intelligence
Free Trial

Stay ahead with proactive cyber threat warnings

Discover how SOCRadar's all-in-one platform can help protect your digital assets with extended threat intelligence, digital risk protection, and attack surface management.