Ransomware Roundup: Cryptonite Ransomware | FortiGuard Labs
Tags
cmtmf-attack-pattern: Supply Chain Compromise
maec-delivery-vectors: Watering Hole
attack-pattern: Data Datasets Malware - T1587.001 Malware - T1588.001 Network Devices - T1584.008 Phishing - T1660 Phishing - T1566 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Supply Chain Compromise - T1474 Connection Proxy - T1090 Supply Chain Compromise - T1195 Supply Chain Compromise
Show in Graph
Common Information
Type Value
UUID c46acf90-f35d-4e13-916d-611d5ac96acb
Fingerprint 9413985a9623a25f
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 23, 2022, 10:14 a.m.
Added to db Nov. 27, 2022, 8:34 p.m.
Last updated Nov. 16, 2024, 7:04 p.m.
Headline Ransomware Roundup: Cryptonite Ransomware
Title Ransomware Roundup: Cryptonite Ransomware | FortiGuard Labs
Detected Hints/Tags/Attributes 54/3/15
Source URLs
Redirection Url
Details Source https://feeds.fortinet.com/~/720196602/0/fortinet/blog/threat-research~Ransomware-Roundup-Cryptonite-Ransomware
Details Source https://www.fortinet.com/blog/threat-research/Ransomware-Roundup-Cryptonite-Ransomware
Details Source https://www.fortinet.com/blog/threat-research/Ransomware-Roundup-Cryptonite-Ransomware?&web_view=true
URL Provider
Details Provider Source level domain
Details fortinet.com www.fortinet.com
Details fortinet.com feeds.fortinet.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 122 ✔ Fortinet Threat Research Blog https://feeds.fortinet.com/fortinet/blog/threat-research 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
exegen.py
Details Domain 16 
ngrok.com
Details Domain 3 
cryptography.io
Details Domain 123 
ipinfo.io
Details Domain 30 
ngrok.io
Details Domain 3 
filecoder.ky
Details Domain 1 
81.59.117.34.bc.googleusercontent.com
Details Domain 1 
ec2-3-125-223-134.eu-central-1.compute.amazonaws.com
Details Domain 1 
e4c0660414bf.eu.ngrok.io
Details File 1 
exegen.py
Details sha256 1 
3b68780719010fc195e6e4f8d1b912030259cb1cddde5a943e44da558222060f
Details sha256 1 
4e86d727ded7ba6c42109262bdf8cb72ae13303769d07995f99e20de3f2ce7ae
Details sha256 1 
7508e8b8054a2f773bb20082460a5e2fb224675c7c5c95a7a7006abf921eaf95
Details IPv4 1 
81.59.117.34
Details Url 2 
https://cryptography.io/en/latest/fernet