Rewterz Threat Alert – STOP (DJVU) Ransomware – Active IOCs
Tags
| attack-pattern: | Data Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 3a91c8be-6b8f-46ce-b3e8-c642c4ababf0 |
| Fingerprint | 8f308df3f35e975b |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Oct. 25, 2023, 11:18 a.m. |
| Added to db | Oct. 31, 2023, 12:28 p.m. |
| Last updated | Sept. 24, 2024, 12:30 a.m. |
| Headline | Rewterz Threat Alert – STOP (DJVU) Ransomware – Active IOCs |
| Title | Rewterz Threat Alert – STOP (DJVU) Ransomware – Active IOCs |
| Detected Hints/Tags/Attributes | 29/1/19 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 365 | ✔ | — | https://www.rewterz.com/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 11 | cve-2023-23583 |
|
| Details | Domain | 39 | api.2ip.ua |
|
| Details | File | 29 | geo.json |
|
| Details | md5 | 1 | 54617b340cd2b0bb2e89ecb20f11ece1 |
|
| Details | md5 | 1 | be7955159a90d8917196d48d7e117337 |
|
| Details | md5 | 1 | 3c5cf7b29c5e2393499c0ddfe0e87f6d |
|
| Details | md5 | 1 | 6e7c7d6435ad5f1e108d41d26e319612 |
|
| Details | md5 | 1 | 97b0e15a6462f40e38291ad94ef9cb30 |
|
| Details | sha1 | 1 | e9d505621ee71e1dba49f14e45c6cbbb980f46a6 |
|
| Details | sha1 | 1 | 56970d24b351ed56b84d82346d84eb4da4886176 |
|
| Details | sha1 | 1 | 0e7ca33af9d4ea6d214f2b58200f44530368e219 |
|
| Details | sha1 | 1 | ebb72a1086be6af30cf0d549663402fd80d99698 |
|
| Details | sha1 | 1 | 4485613ac44f06bf9cab067bc35ccea4a8c3e957 |
|
| Details | sha256 | 1 | 5d192752f52851d5f724cdbc6d69f560942dae759892ea72f7225ceddef357dc |
|
| Details | sha256 | 1 | 0c41e366746aeddf6cdf5442bbd83b1231c94a543b1276fb08817eac7442e4ed |
|
| Details | sha256 | 1 | 88381555c7c219b972b89555bbc25e489ac6ca88c0a10543ba5f731aa1d91e26 |
|
| Details | sha256 | 1 | 52a403747f625e242a45e234b953097a60e502707068adbdb80869ac324df24b |
|
| Details | sha256 | 1 | bda365b76271bb53d92f7335a26539bf13cf17cfbf6b1997acac35f5184da1b2 |
|
| Details | Url | 28 | https://api.2ip.ua/geo.json |