Pulse Detail — Threat Intelligence

PULSE NAME

Karakurt Data Extortion Group

WHITE Karakurt AlienVault 2022-06-02 Modified: 2022-06-02

IOCs

HIGH VOLUME

The Karakurt data extortion group has targeted victims across North America and Europe, demanding a ransom of up to $13,000 (£7,500) for the return of stolen data.

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1591 T1589 T1133 T1190 T1566 T1078 T1083 T1219 T1048 T1567

MALWARE FAMILIES

Karakurt

Indicators of Compromise (5 / 53 total)

All email BitcoinAddress CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-MD5	074863c3352d6dda17dcb8bdc6a8929f	MD5 of 3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56	2022-06-02
FileHash-MD5	1bf171b1f388691c3985df6fb6c3f0d1	MD5 of fdb92fac37232790839163a3cae5f37372db7235	2022-06-02
FileHash-MD5	286aaf0974d06d9b02d11611b2acccef	MD5 of 712733c12ea3b6b7a1bcc032cc02fd7ec9160f5129d9034bf9248b27ec057bd2	2022-06-02
FileHash-MD5	ca2883a7f300abd755706d3a9b55916b	MD5 of 5e2b2ebf3d57ee58cada875b8fbce536edcbbf59acc439081635c88789c67aca	2022-06-02
FileHash-MD5	e2bce0f3162076fa56de5215fd31e3ab	MD5 of 563bc09180fd4bb601380659e922c3f7198306e0caebe99cd1d88cd2c3fd5c1b	2022-06-02

References (1)

↗ https://www.cisa.gov/uscert/ncas/alerts/aa22-152a