LOLKEK Ransomware IOCs - SEC-1275-1
Tags
| attack-pattern: | Domains - T1583.001 Domains - T1584.001 |
Common Information
| Type | Value |
|---|---|
| UUID | a3fe24a8-256a-46d3-8754-715eff3ad961 |
| Fingerprint | e01b5b2938227f6b |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Aug. 10, 2023, midnight |
| Added to db | Aug. 12, 2023, 10:23 a.m. |
| Last updated | Oct. 9, 2024, 8:11 a.m. |
| Headline | LOLKEK Ransomware IOCs |
| Title | LOLKEK Ransomware IOCs - SEC-1275-1 |
| Detected Hints/Tags/Attributes | 9/1/11 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://1275.ru/ioc/2444/lolkek-ransomware-iocs/?from=rss |
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | 1275.ru | 1275.ru |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 8 | ✔ | Архивы IOC - SEC-1275-1 | https://1275.ru/ioc/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 12 | yip.su |
|
| Details | Domain | 3 | mmcbkgua72og66w4jz3qcxkkhefax754pg6iknmtfujvkt2j65ffraad.onion |
|
| Details | sha1 | 3 | 456b0bda3f6d9ec9a874daac050b75fc28174510 |
|
| Details | sha1 | 3 | 768b8d81a6b0f779394e4af48755ca3ad77ed951 |
|
| Details | sha1 | 3 | 88baff4e1751bd364cdb1a4bb5fda4a37ee127c4 |
|
| Details | sha1 | 3 | ed247b58c0680b7c92632209181733e92f1b0721 |
|
| Details | sha256 | 2 | 08029396eb9aef9b413582d103b070c3f422e2b56e1326fe318bef60bdc382ed |
|
| Details | sha256 | 2 | 0b179973dc267d9c300e9b7d3c27c67a18d7c79b2cc34927cbe5a465f83c6190 |
|
| Details | sha256 | 2 | 2c66e5f96470526219f40c6adfd6990cc28d520975da1fdb6bb5497d55a54117 |
|
| Details | sha256 | 2 | 58ac26d62653a648d69d1bcaed1b43d209e037e6d79f62a65eb5d059e8d0fc3f |
|
| Details | Url | 4 | https://yip.su/2qstd5 |