2[.]windowsDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 2 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Encrypted Symphony: Infiltrating the Cicada3301 Ransomware-as-a-Service Group“2[.]Windows Open cmd/powershell as administrator and run locker Locker.exe –key [KEYS]”
Indicators reported together
named in the same reports- xss[.]isin 1 report
- hxxps://xss[.]is/members/376495in 1 report
- 078163d5c16f64ca…e35e6879937bin 1 report
- 7b3022437b637c44…fde179bd984ein 1 report
- 3969e1a88a063155…4abd30553eabin 1 report
- 56e1d092c07322d9…935ca4d2f7e7in 1 report
- com[.]microsoftin 1 report
Copy these 7 indicators · defanged
Thanks — we review every report.