Scattered Spider Ransomware IOCs - SEC-1275-1
Tags
| attack-pattern: | Domains - T1583.001 Domains - T1584.001 |
Common Information
| Type | Value |
|---|---|
| UUID | 87aca860-6e6c-4a82-b26c-e922b0f524e8 |
| Fingerprint | 648dd282d887c353 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Sept. 17, 2024, midnight |
| Added to db | Sept. 17, 2024, 10:03 a.m. |
| Last updated | Dec. 9, 2024, 5:01 a.m. |
| Headline | Scattered Spider Ransomware IOCs |
| Title | Scattered Spider Ransomware IOCs - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 9/1/14 |
Source URLs
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 3 | authenticate-bt.com |
|
| Details | Domain | 2 | creditkarma-help.com |
|
| Details | Domain | 2 | ibexglobai.com |
|
| Details | Domain | 3 | login.five9-hr.com |
|
| Details | Domain | 3 | login.uscc-hr.com |
|
| Details | Domain | 4 | revolut-ticket.com |
|
| Details | Domain | 3 | securian-hr.com |
|
| Details | Domain | 2 | servicenow-help.com |
|
| Details | md5 | 2 | 1d05a83a639031913574c0bbb06026a4 |
|
| Details | md5 | 2 | 586bd54b564926682b75330b190cbace |
|
| Details | md5 | 2 | 8445274c237eb83d56070e499f43641f |
|
| Details | md5 | 3 | b233ff9dcf5520d69f9b75e1424f3271 |
|
| Details | md5 | 2 | c7497366fd0d8c9d72f96e7190632a51 |
|
| Details | md5 | 2 | cc230dcea35be180e3487b53e4b2cfba |