2024-08-28 RansomHub ransomware-as-a-service| Threat Intelligence Malaysia

📃Title: RansomHub ransomware-as-a-service
📅Date: 2024-08-28
🔗References:

https://www.group-ib.com/blog/ransomhub-raas/

🔖Rectifyq Taxonomies:

relevancy: 🔴 Highly Relevant
category: ⚔Threat
target: broad-based
MY-relevancy: relevant
action-taken: diamond-model

🔖MISP Galaxies:

producer Group-IB
ransomware=“ransomhub”
target-information=“Indonesia”
target-information=“Japan”
target-information=“Malaysia”
target-information=“Vietnam”
mitre-attack-pattern=[‘T1562.001’, ‘T1078.002’, ‘T1133’, ‘T1570’, ‘T1046’, ‘T1021’, ‘T1018’]

MISP event uuid: ff1caf0f-773f-4797-865c-4ea44e46cab8

Indicator of Compromise (IoCs)

type,value,comment
url, http://ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion/, ''

Full IOCs available in Rectifyq's MISP```