FunkSec – Alleged Top Ransomware Group Powered by AI - Check Point Research
Tags
Common Information
| Type | Value |
|---|---|
| UUID | 58550a56-5186-4cbe-ab51-e6b62f489e96 |
| Fingerprint | bf10932988d187d3 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Jan. 10, 2025, noon |
| Added to db | Jan. 10, 2025, 1:49 p.m. |
| Last updated | Jan. 18, 2025, 9:39 a.m. |
| Headline | FunkSec – Alleged Top Ransomware Group Powered by AI |
| Title | FunkSec – Alleged Top Ransomware Group Powered by AI - Check Point Research |
| Detected Hints/Tags/Attributes | 82/2/32 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 515 | ✔ | Check Point Research | https://research.checkpoint.com/feed/ | 2024-09-01 15:09 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 2 | ransomware.rs |
|
| Details | Domain | 4 | readme.me |
|
| Details | Domain | 3 | orion.rs |
|
| Details | File | 3 | dev.exe |
|
| Details | File | 299 | chrome.exe |
|
| Details | File | 214 | firefox.exe |
|
| Details | File | 146 | msedge.exe |
|
| Details | File | 1374 | explorer.exe |
|
| Details | File | 188 | outlook.exe |
|
| Details | File | 20 | vlc.exe |
|
| Details | File | 40 | spotify.exe |
|
| Details | File | 91 | skype.exe |
|
| Details | File | 40 | discord.exe |
|
| Details | File | 106 | steam.exe |
|
| Details | File | 100 | java.exe |
|
| Details | File | 77 | python.exe |
|
| Details | File | 34 | node.exe |
|
| Details | File | 2392 | cmd.exe |
|
| Details | File | 1396 | powershell.exe |
|
| Details | File | 130 | taskmgr.exe |
|
| Details | File | 22 | wmplayer.exe |
|
| Details | File | 13 | tscon.exe |
|
| Details | File | 440 | notepad.exe |
|
| Details | sha256 | 4 | 5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd |
|
| Details | sha256 | 4 | c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c |
|
| Details | sha256 | 4 | 66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd |
|
| Details | sha256 | 4 | dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac |
|
| Details | sha256 | 4 | b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb |
|
| Details | sha256 | 4 | e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22 |
|
| Details | sha256 | 4 | 20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d |
|
| Details | sha256 | 4 | dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966 |
|
| Details | sha256 | 4 | 7e223a685d5324491bcacf3127869f9f3ec5d5100c5e7cb5af45a227e6ab4603 |