← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Social Engineering Campaign Linked to Black Basta Ransomware Operators | Rapid7 Blog
WHITE Armature_TIP 2025-02-22 Modified: 2025-03-24
18
IOCs
MEDIUM VOLUME
managed detection and response (mdr)detection and responseransomwareemergent threat responseincident responserapid7cobalt strikec2 serverpowershellanydeskimpacketcommandquick assistblack bastait teamaprilservicevoiceshellexecutionenterprise
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (2 / 18 total)
All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 580ba62ea52551e50a6e4d1f8e49d630 MD5 of 35456f84bc88854f16e316290104d71a1f350e84b479eebd6fbb2f77d36bca8a 2025-02-22
FileHash-MD5 6615ea2fa3b879d27687a7ce917e93b0 MD5 of 6f31cf7a11189c683d8455180b4ee6a60781d2e3f3aadf3ecc86f578d480cfa9 2025-02-22
References (1)
↗ https://www.rapid7.com/blog/post/2024/05/10/ongoing-social-engineering-campaign-linked-to-black-basta-ransomware-operators/