PULSE NAME
TI Advisory No-ESAF-SOC-TI-320
WHITE Abinsiby12345 2025-09-27 Modified: 2025-09-27
184
IOCs
HIGH VOLUME
"The ransomware compromises confidentiality by encrypting sensitive files, while integrity is undermined by data tampering through forced extensions and ransom note injection. Availability is critically affected when files are locked and, if ransom remains unpaid, the Master Boot Record is overwritten, rendering the system inoperable. Authentication mechanisms are bypassed via persistence and unauthorized scheduled tasks, ensuring continuous attacker control."
Indicators of Compromise (184)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain email
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 e7c4b46eb8854da31bc98e604ce77704 2025-09-27
FileHash-SHA1 4b1e7937b89a491bf105e1242a1b84c3ba9e9e66 SHA1 of e7c4b46eb8854da31bc98e604ce77704 2025-09-27
FileHash-SHA256 b01a96892f3efdaa6682078339b23d8954d571c27ee15a4ce9ef8ad6c415f06d SHA256 of e7c4b46eb8854da31bc98e604ce77704 2025-09-27
FileHash-MD5 12c3254f0e01f3596dda380718394fb1 2025-09-27
FileHash-MD5 16b4d928126efc786f370d6da015f5d9 MD5 of 48f021718c7919affb10679d7235267b69564a8b 2025-09-27
FileHash-MD5 1ce419f381c6614143af50d6bf5c9d13 2025-09-27
FileHash-MD5 2ac219fe6fa42486330d09392296705f MD5 of d4941479fab7aeca3903c0d93a03123c834f71ef 2025-09-27
FileHash-MD5 2ffc2446a2a6cf04c06a85deb43b9fb8 MD5 of dba864bc9a2cf520b7bbee8b77284774a8329307 2025-09-27
FileHash-MD5 31fa5f0387d2f84c09d409cee26407c8 MD5 of 03915f700402fec04c6c3ef38e827e0093d1c533 2025-09-27
FileHash-MD5 3504dd5ccaedef6d34d7e9090458e58b MD5 of f2da3d1410c5058720a4307acf5fec7fc2b54285be9dd89eae108cce368dcde7 2025-09-27
FileHash-MD5 351a999d84f24e916cb1bbdfc993e132 MD5 of 422f676eeb79ea70bc458c5b93238d0df50324b9 2025-09-27
FileHash-MD5 3b97edb736c6a7b8278aa72f519ce38c MD5 of 2e67dc490c28bb6f421419cc91ea151cfec25119 2025-09-27
FileHash-MD5 3e5f6b323fa4b9d3d1a47692daea11b2 MD5 of 3081bbd117a6b69c74b41215703b90bcb7187232 2025-09-27
FileHash-MD5 4243af93241f7b07f670a46a579441aa MD5 of 3247b306bf3edd77a96a97925b6a01032bea806b 2025-09-27
FileHash-MD5 4d93d61ec6d92e7a7f86ac8434bbab89 MD5 of 6410f56102aa43a8815c13bdd94e1f55df3fe7cb 2025-09-27
FileHash-MD5 53d41cbc042b6f018df7d8edc6bbac55 MD5 of 90df5483fdf14af13edf56b74289550dae79693c 2025-09-27
FileHash-MD5 555cb899816e260b73d9f59c3e5a9892 2025-09-27
FileHash-MD5 614585d4314bd9a61bbab2ee5b303742 2025-09-27
FileHash-MD5 64e5ea12f686c7f9d0b11565548b64a3 2025-09-27
FileHash-MD5 66e7ec775310c3d13e04b87327f64221 2025-09-27
FileHash-MD5 7f3849dad1a9c49c814f78dee74be11b MD5 of 0605bf2a926d41e330dfa16036d968cbdb230601 2025-09-27
FileHash-MD5 88c7d4d1f0c8e8197c8353cb2c459e45 2025-09-27
FileHash-MD5 8aea251877cb4f5ee6cf357831f8620c MD5 of 297eb4dee673ee0bcb7ba1c3849f130e7a0c6805 2025-09-27
FileHash-MD5 8f2403608140f8bff2c7ca856a929b7f 2025-09-27
FileHash-MD5 91029c32eb04269418df1c7d535de73b 2025-09-27
FileHash-MD5 9d95bda726686c9e12c17e733ac7e8d1 2025-09-27
FileHash-MD5 a2b6569bb4a98edac79a983684bb7177 2025-09-27
FileHash-MD5 a9707f640bd55e8bd5b90b2c1c61a3a7 2025-09-27
FileHash-MD5 ad81961ccc571e985d35e6f30d396859 2025-09-27
FileHash-MD5 aef0050c65a12cdf69603b39bc707f6c MD5 of 69338159672de3bcdcc18d8e434380b679b88101 2025-09-27
FileHash-MD5 affd7cfdd9720f8a044d5e9410923a78 2025-09-27
FileHash-MD5 b8400afd1787cfefae5eb262ab3335e4 2025-09-27
FileHash-MD5 b94f3ff666d9781cb69088658cd53772 2025-09-27
FileHash-MD5 bac6bff5ad1cf2971b7863fc79a31a88 MD5 of e3e9da001802b8d61415c2d0adebe516e574e5b7 2025-09-27
FileHash-MD5 bc04c6d5de7fda6f8b6e07df580664cf 2025-09-27
FileHash-MD5 bc60a6c03e8f86b2196fd515583c4827 MD5 of d7ed7f0d6716d031826141dba307a5f1af216020 2025-09-27
FileHash-MD5 c80513aaff11a2a2914d3a674737f63f 2025-09-27
FileHash-MD5 c9854160ae23ca269f909c0bd3661e8e MD5 of cdeff95d288f55ff3baec6262515f8505af4a225 2025-09-27
FileHash-MD5 cf082d2fcbabaa1ad99873de9600440f 2025-09-27
FileHash-MD5 d03823a205919b6927f3fa3164be5ac5 2025-09-27
FileHash-MD5 d797d3d3c950d0fad4a9515910bade6d MD5 of ae5bebbe24779ff984b6ab3f1c842d05cc61cd0e 2025-09-27
FileHash-MD5 d7d28006e0679b1f2ea0a87ba94f4af0 MD5 of 675f7b9185ccc3241650ff2fd96f5e1a0bbf63ee 2025-09-27
FileHash-MD5 d8d0f6578b611a57198a8463ce3290a5 2025-09-27
FileHash-MD5 d9bb86403137db8c2e46bcdd7b162f81 2025-09-27
FileHash-MD5 e1939e3f77e45b1e8dd5f0213f643b14 2025-09-27
FileHash-MD5 f1067372c8be0f15e7bf836a657a34a4 MD5 of d396de116dff4fac6c78b0826ad43ebb6e041f3d 2025-09-27
FileHash-MD5 f7437da400824370e326d29638e1b5d2 2025-09-27
FileHash-SHA1 03915f700402fec04c6c3ef38e827e0093d1c533 2025-09-27
FileHash-SHA1 0605bf2a926d41e330dfa16036d968cbdb230601 2025-09-27
FileHash-SHA1 270049aa93ba2f8df6d6402e52a519cf9f187ad0 SHA1 of 555cb899816e260b73d9f59c3e5a9892 2025-09-27
FileHash-SHA1 297eb4dee673ee0bcb7ba1c3849f130e7a0c6805 2025-09-27
FileHash-SHA1 2e67dc490c28bb6f421419cc91ea151cfec25119 2025-09-27
FileHash-SHA1 2ee4b6c746b4f2a4ea832a53109531152ed324f6 SHA1 of e1939e3f77e45b1e8dd5f0213f643b14 2025-09-27
FileHash-SHA1 3081bbd117a6b69c74b41215703b90bcb7187232 2025-09-27
FileHash-SHA1 3247b306bf3edd77a96a97925b6a01032bea806b 2025-09-27
FileHash-SHA1 39dc8ac32563d88a11dee49137a0353b46f3eb38 SHA1 of ad81961ccc571e985d35e6f30d396859 2025-09-27
FileHash-SHA1 409181132564166a62ee867321ebc07089e49085 SHA1 of d03823a205919b6927f3fa3164be5ac5 2025-09-27
FileHash-SHA1 422f676eeb79ea70bc458c5b93238d0df50324b9 2025-09-27
FileHash-SHA1 44d8db5b5fb731f9deacd6e7bfb22db557e833b3 SHA1 of b8400afd1787cfefae5eb262ab3335e4 2025-09-27
FileHash-SHA1 48f021718c7919affb10679d7235267b69564a8b 2025-09-27
FileHash-SHA1 4ddeb9b3fc1f6898649a4bb2b25a64e089333906 SHA1 of 88c7d4d1f0c8e8197c8353cb2c459e45 2025-09-27
FileHash-SHA1 51bab00a9c30b5fe06b99a35b19eb19870dab175 SHA1 of d8d0f6578b611a57198a8463ce3290a5 2025-09-27
FileHash-SHA1 5ccee068daf8a672d0e63e334e00985aa7fe56aa 2025-09-27
FileHash-SHA1 5df04cae6770dc01afe18e7e65ea1c646ebaa8e7 SHA1 of 1ce419f381c6614143af50d6bf5c9d13 2025-09-27
FileHash-SHA1 614585d4314bd9a61bbab2ee5b3037426ebbd5e5 SHA1 of 64e5ea12f686c7f9d0b11565548b64a3 2025-09-27
FileHash-SHA1 6280f2bf535f144fd816d5924bb27c6f0f108f09 SHA1 of d9bb86403137db8c2e46bcdd7b162f81 2025-09-27
FileHash-SHA1 6410f56102aa43a8815c13bdd94e1f55df3fe7cb 2025-09-27
FileHash-SHA1 675f7b9185ccc3241650ff2fd96f5e1a0bbf63ee 2025-09-27
FileHash-SHA1 69338159672de3bcdcc18d8e434380b679b88101 2025-09-27
FileHash-SHA1 6e2dc76a6026d4f2194c7b2149f6633646684e69 SHA1 of 12c3254f0e01f3596dda380718394fb1 2025-09-27
FileHash-SHA1 7a8f4182a2cf5b094ac3a48c4cb2f0ef39facd05 2025-09-27
FileHash-SHA1 7b73993fb07c0b16171bad449e49c9344ca87d6a SHA1 of f2da3d1410c5058720a4307acf5fec7fc2b54285be9dd89eae108cce368dcde7 2025-09-27
FileHash-SHA1 7de6ae598de91e85d247d341f829f0bc16f341a0 SHA1 of b94f3ff666d9781cb69088658cd53772 2025-09-27
FileHash-SHA1 80ac3f86c3a31c4516f9077f8c5e990de2068032 SHA1 of affd7cfdd9720f8a044d5e9410923a78 2025-09-27
FileHash-SHA1 851cbce081d2b694985d349ecc92b144da527327 SHA1 of 91029c32eb04269418df1c7d535de73b 2025-09-27
FileHash-SHA1 90df5483fdf14af13edf56b74289550dae79693c 2025-09-27
FileHash-SHA1 a3758fc9b515d8cab2baf4bfce9cb7b2bc54beab SHA1 of f7437da400824370e326d29638e1b5d2 2025-09-27
FileHash-SHA1 a54627ea2a555d4842817d2fa578fe28ca0d7645 SHA1 of cf082d2fcbabaa1ad99873de9600440f 2025-09-27
FileHash-SHA1 ae5bebbe24779ff984b6ab3f1c842d05cc61cd0e 2025-09-27
FileHash-SHA1 bea2d342b2e295dd52c8cc45f14b0b759b7659a2 SHA1 of a9707f640bd55e8bd5b90b2c1c61a3a7 2025-09-27
FileHash-SHA1 c710f732fd6f8ca4cb6d65d86a248b5d7c74f70a SHA1 of 66e7ec775310c3d13e04b87327f64221 2025-09-27
FileHash-SHA1 cdeff95d288f55ff3baec6262515f8505af4a225 2025-09-27
FileHash-SHA1 d396de116dff4fac6c78b0826ad43ebb6e041f3d 2025-09-27
FileHash-SHA1 d4941479fab7aeca3903c0d93a03123c834f71ef 2025-09-27
FileHash-SHA1 d7ed7f0d6716d031826141dba307a5f1af216020 2025-09-27
FileHash-SHA1 dba864bc9a2cf520b7bbee8b77284774a8329307 2025-09-27
FileHash-SHA1 e3e9da001802b8d61415c2d0adebe516e574e5b7 2025-09-27
FileHash-SHA1 fe75b83cc8424ba119b9ca716ad001a284d62ead 2025-09-27
FileHash-SHA256 0684437b17ae4c28129fbb2cfe75b83cc8424ba119b9ca716ad001a284d62ead SHA256 of 422f676eeb79ea70bc458c5b93238d0df50324b9 2025-09-27
FileHash-SHA256 15d7342be36d20ce615647fac9c2277f46b6d19aa54f3cf3d99e49d6ce0486d0 SHA256 of 297eb4dee673ee0bcb7ba1c3849f130e7a0c6805 2025-09-27
FileHash-SHA256 1a4a3bfb72f3a80e4b499ecebe99f53a2b7785eace7f612b3e219409d1e1ffc7 SHA256 of dba864bc9a2cf520b7bbee8b77284774a8329307 2025-09-27
FileHash-SHA256 2a7f01d924a4fc38c9fad586634eccbc28de07d97531c4a02eb6085359093a45 SHA256 of d7ed7f0d6716d031826141dba307a5f1af216020 2025-09-27
FileHash-SHA256 37702b94f9fc14a406312a2a392ad9553cf05c4b6870d94b5cf4781c02c29414 SHA256 of 1ce419f381c6614143af50d6bf5c9d13 2025-09-27
FileHash-SHA256 4215b5ce91deb97011cba2dd94d5bac1a745d6d55f6938b86e209eaaf8e655df SHA256 of cdeff95d288f55ff3baec6262515f8505af4a225 2025-09-27
FileHash-SHA256 478c116d9bb318b4621c7839c81be36261c38e748a593249f8c9c67789f71064 SHA256 of affd7cfdd9720f8a044d5e9410923a78 2025-09-27
FileHash-SHA256 4e6471c4574152d0eb2d2c608e540e505f3db41b50997d1f06c47e587a355d80 SHA256 of cf082d2fcbabaa1ad99873de9600440f 2025-09-27
FileHash-SHA256 52c045b57e24585467be13454c5db551987fd23bfa931a7f6ab41e6f11b8a7ec SHA256 of a9707f640bd55e8bd5b90b2c1c61a3a7 2025-09-27
FileHash-SHA256 55da12a82c8e0b9fda5dbba6612627c0ee5d13d55e3bcc1df2ca9785c97caf64 SHA256 of 12c3254f0e01f3596dda380718394fb1 2025-09-27
FileHash-SHA256 5ccee068daf8a672d0e63e334e00985aa7fe56aa26b6c036d562728fdf968237 SHA256 of b8400afd1787cfefae5eb262ab3335e4 2025-09-27
FileHash-SHA256 6205056cd92c75579f56bd0ce7159fae9f360d4c183beb10743330952bf22056 SHA256 of 3247b306bf3edd77a96a97925b6a01032bea806b 2025-09-27
FileHash-SHA256 630e24cc1c4c95321965ad967e77e1888c48c4b1f653d800c7df08e879814787 SHA256 of ad81961ccc571e985d35e6f30d396859 2025-09-27
FileHash-SHA256 78a530f35d1cc89fc757b7661cbd57b2e9e46aeed53e2e66247db66c214a2ba0 SHA256 of 48f021718c7919affb10679d7235267b69564a8b 2025-09-27
FileHash-SHA256 7c890018d49fe085cd8b78efd1f921cc01936c190284a50e3c2a0b36917c9e10 SHA256 of b94f3ff666d9781cb69088658cd53772 2025-09-27
FileHash-SHA256 7f23ea1e5ab087ba2c4e0ea251d680ef5190d49181efcc222702075b276d5990 SHA256 of 2e67dc490c28bb6f421419cc91ea151cfec25119 2025-09-27
FileHash-SHA256 8630df622ee773c3d9c934fe9d925c019b43232e8f2810ee651dcf5f3ec79893 SHA256 of d9bb86403137db8c2e46bcdd7b162f81 2025-09-27
FileHash-SHA256 88acae18f2cf7de7bb76784d45d9612561c8890872ea3629f0608577928745a5 SHA256 of 88c7d4d1f0c8e8197c8353cb2c459e45 2025-09-27
FileHash-SHA256 8cb1e9c99ad716a2541697a6d4ada32433b56e11dfe6aa1cb7c4fbc72b4bad2e SHA256 of d8d0f6578b611a57198a8463ce3290a5 2025-09-27
FileHash-SHA256 8de5b9332556da8f401c5cbf3cea1dbc1e1ba277c0efa85dce8cd36310c2936c SHA256 of 3081bbd117a6b69c74b41215703b90bcb7187232 2025-09-27
FileHash-SHA256 8f78555f0f62b4f280a77109dbaa4aeb5c347d1ea38b521f98c57a7acea8087e SHA256 of 555cb899816e260b73d9f59c3e5a9892 2025-09-27
FileHash-SHA256 8f8cf6b8cd0c789d3f67f6291bb7c0c5416e27320631c852152a63513185941e SHA256 of 64e5ea12f686c7f9d0b11565548b64a3 2025-09-27
FileHash-SHA256 9ab1694c978f11521c6bca73d40256e4b433f3279792db8ae1fecc5e0ad174c9 SHA256 of 91029c32eb04269418df1c7d535de73b 2025-09-27
FileHash-SHA256 a1e30ea263ba21d656717f7f7824ecb2dc90896f55eae134afaf7691209979fd SHA256 of d396de116dff4fac6c78b0826ad43ebb6e041f3d 2025-09-27
FileHash-SHA256 ac1b326f23e17726a2b90ce8a9d29c6e44a2cb37b431e2b94734bdd17618ae26 SHA256 of ae5bebbe24779ff984b6ab3f1c842d05cc61cd0e 2025-09-27
FileHash-SHA256 adacbc5402326f87c76cc7737ad924ce5bd7394400ef86a48fa754af9d22da66 SHA256 of 03915f700402fec04c6c3ef38e827e0093d1c533 2025-09-27
FileHash-SHA256 b8996e435ba229837d13f9837f6c0451f50a5767b0d1f1bb715670c802a1d564 SHA256 of 0605bf2a926d41e330dfa16036d968cbdb230601 2025-09-27
FileHash-SHA256 c1e8c720da2297aa4432364441b341ec85e6f7f571cf6348ffdc51f4ae96418a SHA256 of e3e9da001802b8d61415c2d0adebe516e574e5b7 2025-09-27
FileHash-SHA256 c3fe7ee5451108c16d7730d0bf589f70b841f3846908c1761d827a70f3462ef0 SHA256 of 6410f56102aa43a8815c13bdd94e1f55df3fe7cb 2025-09-27
FileHash-SHA256 c80513aaff11a2a2914d3a674737f63fbc04c6d5de7fda6f8b6e07df580664cf SHA256 of 90df5483fdf14af13edf56b74289550dae79693c 2025-09-27
FileHash-SHA256 c9b1665e58fe0bd5a47bac14d7f262fcb21a90775c97bd778288c21eaac7435b SHA256 of d03823a205919b6927f3fa3164be5ac5 2025-09-27
FileHash-SHA256 cb17673f3cde6e542db3ff5facee2a01fdec462be275e9274c512038470009d1 SHA256 of 66e7ec775310c3d13e04b87327f64221 2025-09-27
FileHash-SHA256 da0a82d322502cd6d156649dee1e0a45348df0dce272b6ae2dd81af25f774c62 SHA256 of e1939e3f77e45b1e8dd5f0213f643b14 2025-09-27
FileHash-SHA256 df24b04f6ff0ac50fbf1c01ee02f809c1c3f9fbe9d14eefc3306b1b586bf943e SHA256 of 69338159672de3bcdcc18d8e434380b679b88101 2025-09-27
FileHash-SHA256 e28b0a93649010788bbeda883a08254fefe3710700fc2c5a8dea94ec39402ec3 SHA256 of 675f7b9185ccc3241650ff2fd96f5e1a0bbf63ee 2025-09-27
FileHash-SHA256 e9e80fd3fe71d133609f5bc75081b13123e4f9a5ed1920050727955185f3ce52 SHA256 of f7437da400824370e326d29638e1b5d2 2025-09-27
FileHash-SHA256 f2da3d1410c5058720a4307acf5fec7fc2b54285be9dd89eae108cce368dcde7 2025-09-27
FileHash-SHA256 fffcf4be17e732aa3a5387e747290236d0f75ff3a24cb43eca793668d7772ddd SHA256 of d4941479fab7aeca3903c0d93a03123c834f71ef 2025-09-27
domain anota.com 2025-09-27
domain ence.com 2025-09-27
domain gsafe.io 2025-09-27
domain loki-locker.one 2025-09-27
domain loki.black 2025-09-27
domain loki.help 2025-09-27
email adairfile@mailfence.com 2025-09-27
email admindec@rape.lol 2025-09-27
email black@msgsafe.io 2025-09-27
email blackspyro@mailfence.com 2025-09-27
email blackspyro@tutanota.com 2025-09-27
email d4rkw4ve@tutanota.com 2025-09-27
email darkkiller@cock.li 2025-09-27
email decnow@msgsafe.io 2025-09-27
email decnow@tutamail.com 2025-09-27
email decoder@firemail.cc 2025-09-27
email decryptfiles@goat.si 2025-09-27
email decryptyourfiles@firemail.cc 2025-09-27
email decsup@tuta.io 2025-09-27
email filemanager@cock.li 2025-09-27
email help02@mailfence.com 2025-09-27
email helpingdecode@tutanota.com 2025-09-27
email i02@mailfence.com 2025-09-27
email jesushelp01@techmail.info 2025-09-27
email kingbo@tutanota.com 2025-09-27
email kingboo@mailfence.com 2025-09-27
email kingvps@mailfence.com 2025-09-27
email lcon9@cyberfear.com 2025-09-27
email lockirswsuppurt@mailfence.co 2025-09-27
email lockteam@cock.li 2025-09-27
email lockteam@keemail.me 2025-09-27
email loki.black@mailfence.com 2025-09-27
email loki.black@msgsafe.io 2025-09-27
email loki.help@bingzone.net 2025-09-27
email loki.help@mailfence.com 2025-09-27
email loki.support02@mailfence.com 2025-09-27
email loki01@keemail.me 2025-09-27
email lordpdx@tutanota.com 2025-09-27
email mrcrypt2@mailfence.com 2025-09-27
email mrrobot13@cock.li 2025-09-27
email pf2536@tutanota.com 2025-09-27
email port01@techmail.info 2025-09-27
email r@mailfence.com 2025-09-27
email racle11@keemail.me 2025-09-27
email rain.man13@mailfence.com 2025-09-27
email rdpmanager@airmail.cc 2025-09-27
email roxlock@keemail.me 2025-09-27
email roxlock@mailfence.com 2025-09-27
email sapphire01@keemail.me 2025-09-27
email sapphire02@mailfence.com 2025-09-27
email shadow0@mailfence.com 2025-09-27
email shadow11@mailfence.com 2025-09-27
email skydancerf5@cock.li 2025-09-27
email skydancerf5@tutanota.com 2025-09-27
email t@msgsafe.io 2025-09-27
email vps1@mailfence.com 2025-09-27
email xmagic22@tutanota.com 2025-09-27
email xmaster22@tutanota.com 2025-09-27