IoCs/Ransomware_BlackKingDom.csv at master · sophoslabs/IoCs
Tags
| attack-pattern: | Data Malware - T1587.001 Malware - T1588.001 |
Common Information
| Type | Value |
|---|---|
| UUID | f28ebd26-8a87-4348-a82d-05ffd84fbe3f |
| Fingerprint | 8b672830f8723e79 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Jan. 1, 2022, midnight |
| Added to db | Sept. 11, 2022, 12:45 p.m. |
| Last updated | Nov. 4, 2024, 3:19 a.m. |
| Headline | UNKNOWN |
| Title | IoCs/Ransomware_BlackKingDom.csv at master · sophoslabs/IoCs |
| Detected Hints/Tags/Attributes | 12/1/20 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://github.com/sophoslabs/IoCs/blob/master/Ransomware_BlackKingDom.csv |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 71 | news.sophos.com |
|
| Details | Domain | 5 | yuuuuu44.com |
|
| Details | File | 1 | ransomware_blackkingdom.csv |
|
| Details | File | 2 | chackpasspl.aspx |
|
| Details | File | 2 | chackidio.aspx |
|
| Details | sha256 | 4 | b9dbdf11da3630f464b8daace88e11c374a642e5082850e9f10a1b09d69ff04f |
|
| Details | sha256 | 3 | c4aa94c73a50b2deca0401f97e4202337e522be3df629b3ef91e706488b64908 |
|
| Details | sha256 | 3 | a387c3c5776ee1b61018eeb3408fa7fa7490915146078d65b95621315e8b4287 |
|
| Details | sha256 | 2 | 815d7f9d732c4d1a70cec05433b8d4de75cba1ca9caabbbe4b8cde3f176cc670 |
|
| Details | sha256 | 3 | 910fbfa8ef4ad7183c1b5bdd3c9fd1380e617ca0042b428873c48f71ddc857db |
|
| Details | sha256 | 3 | 866b1f5c5edd9f01c5ba84d02e94ae7c1f9b2196af380eed1917e8fc21acbbdc |
|
| Details | sha256 | 3 | c25a5c14269c990c94a4a20443c4eb266318200e4d7927c163e0eaec4ede780a |
|
| Details | sha256 | 1 | 62615438cf8f7de6600d16a493c28bbbd3b052ccc4f9414dfe1cf031681e226f |
|
| Details | sha256 | 1 | 800e036cf9da316193becabc6ace688634709cd898ae81893e80b635dcaa06d0 |
|
| Details | IPv4 | 1 | 104.21.89.10 |
|
| Details | IPv4 | 1 | 172.64.80.0 |
|
| Details | IPv4 | 4 | 185.220.101.204 |
|
| Details | IPv4 | 2 | 185.220.101.216 |
|
| Details | Url | 1 | https://news.sophos.com/en-us/2021/03/23/black-kingdom |
|
| Details | Url | 3 | http://yuuuuu44.com/vpn-service |