16 MAR 2021 CP-000142-MW Increase in PYSA Ransomware Targeting Education Institutions
Common Information
| Type | Value |
|---|---|
| UUID | cd3438f1-8ba1-4eb5-90fc-c87d8e435c81 |
| Fingerprint | 63121060f7011e70cf113abd5e7d04486390036616e4c9d8fc824036c76194ad |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | March 16, 2021, 8:45 a.m. |
| Added to db | Dec. 19, 2024, 12:41 p.m. |
| Last updated | Dec. 19, 2024, 12:43 p.m. |
| Headline | 16 MAR 2021 CP-000142-MW Increase in PYSA Ransomware Targeting Education Institutions |
| Title | 16 MAR 2021 CP-000142-MW Increase in PYSA Ransomware Targeting Education Institutions |
| Detected Hints/Tags/Attributes | 66/2/87 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://www.ic3.gov/CSA/2021/210316.pdf |
| Details | Redirection | https://www.ic3.gov/Media/News/2021/210316.pdf |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 88 | mega.nz |
|
| Details | Domain | 2 | pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion |
|
| Details | Domain | 1 | na47pldl5eoqxt42.onion |
|
| Details | Domain | 419 | protonmail.com |
|
| Details | Domain | 95 | onionmail.org |
|
| Details | Domain | 3 | portonmail.com |
|
| Details | Domain | 62 | mailfence.com |
|
| Details | Domain | 45 | ic3.gov |
|
| Details | Domain | 183 | www.ic3.gov |
|
| Details | 3 | ced_cririele93@protonmail.com |
||
| Details | 3 | veronabello@onionmail.org |
||
| Details | 3 | irvingalfie@protonmail.com |
||
| Details | 3 | giuliacabello@onionmail.org |
||
| Details | 3 | gustaf.wixon@protonmail.com |
||
| Details | 3 | avitacabrera@protonmail.com |
||
| Details | 3 | ralfgriffin@protonmail.com |
||
| Details | 3 | domenikuvoker@protonmail.com |
||
| Details | 3 | korgy.torky@protonmail.com |
||
| Details | 6 | mespinoza980@protonmail.com |
||
| Details | 3 | astion11@protonmail.com |
||
| Details | 5 | ellershaw.kiley@protonmail.com |
||
| Details | 3 | bfgkwethnsb@protonmail.com |
||
| Details | 3 | jonivaeng@protonmail.com |
||
| Details | 3 | logan_a_gray@protonmail.com |
||
| Details | 5 | alanson_street8@protonmail.com |
||
| Details | 3 | rafaeldari@onionmail.org |
||
| Details | 5 | raingemaximo@protonmail.com |
||
| Details | 3 | abelzackary@onionmail.org |
||
| Details | 3 | mcpherson.artair@protonmail.com |
||
| Details | 3 | elliotstaarss1@protonmail.com |
||
| Details | 5 | lambchristoffer@protonmail.com |
||
| Details | 3 | timwestbrook@onionmail.org |
||
| Details | 4 | gareth.mckie3l@protonmail.com |
||
| Details | 3 | pauldade@onionmail.org |
||
| Details | 3 | rohrbacherlucho@protonmail.com |
||
| Details | 2 | carmenwashingtongton@portonmail.com |
||
| Details | 5 | aireyeric@protonmail.com |
||
| Details | 3 | cozmo.storton@protonmail.com |
||
| Details | 3 | noblecocking@protonmail.com |
||
| Details | 3 | karim.abson@protonmail.com |
||
| Details | 3 | presleybarry63@protonmail.com |
||
| Details | 3 | chettle.willem@protonmail.com |
||
| Details | 3 | duncan_cautherey@protonmail.com |
||
| Details | 3 | dalliss.prout96@protonmail.com |
||
| Details | 3 | shdujdsh@protonmail.com |
||
| Details | 3 | karkeck.arch@protonmail.com |
||
| Details | 3 | ihdtwesfs@portonmail.com |
||
| Details | 3 | keefe.mcmeckan@protonmail.com |
||
| Details | 3 | williamjohnson1963@protonmail.com |
||
| Details | 3 | keepupchell@protonmail.com |
||
| Details | 3 | casualstroons@portonmail.com |
||
| Details | 3 | gabriel8970@protonmail.com |
||
| Details | 3 | izak.pollington@protonmail.com |
||
| Details | 3 | masonhoyt@onionmail.org |
||
| Details | 3 | t_trstram@protonmail.com |
||
| Details | 3 | merry.lane@mailfence.com |
||
| Details | 3 | willmottlem01@protonmail.com |
||
| Details | 3 | jamesy.kettlewell@protonmail.com |
||
| Details | 3 | bettyracine@protonmail.com |
||
| Details | 3 | platt.lucais@protonmail.com |
||
| Details | 3 | ohsgsuywb@protonmail.com |
||
| Details | 3 | jarret.wharram@protonmail.com |
||
| Details | 3 | lojdgseywu@protonmail.copm |
||
| Details | 3 | hewitt_rogers@protonmail.com |
||
| Details | 3 | johnbeamvv@protonmail.com |
||
| Details | 3 | thorvald_beattie@protonmail.com |
||
| Details | 3 | rewhgsch@protonmail.com |
||
| Details | 3 | warden_riddoch@protonmail.com |
||
| Details | 3 | lhdbeysdq@protonmail.com |
||
| Details | 3 | cowland_lothaire@protonmail.com |
||
| Details | 3 | mario1@mailfence.com |
||
| Details | 3 | nickola_men@protonmail.com |
||
| Details | File | 1199 | svchost.exe |
|
| Details | File | 1353 | powershell.exe |
|
| Details | File | 1 | %username%\downloads\svchost.exe |
|
| Details | File | 1 | 17535.py |
|
| Details | File | 1 | step2.ps1 |
|
| Details | File | 1 | sshs.exe |
|
| Details | File | 1347 | explorer.exe |
|
| Details | sha1 | 2 | 07cb2a3fe86414b054e2b002f283935bb0cb993c |
|
| Details | sha1 | 2 | 52b2fc13ec0dbf8a0250c066cd3486b635a27827 |
|
| Details | sha1 | 2 | 728cb56f98edbada697fe66fbf7d367215271f10 |
|
| Details | sha1 | 2 | c74378a93806628b62276195f9657487310a96fd |
|
| Details | sha1 | 2 | 24c592ad9b21df380cb4f39a85d4375b6a8a6175 |
|
| Details | sha1 | 2 | f2dda8720a5549d4666269b8ca9d629ea8b76bdf |
|
| Details | Url | 2 | https://ic3.gov |
|
| Details | Url | 27 | https://www.ic3.gov/pifsurvey |