com[.]microsoftDomain

Reported by 1 independent source · first reported 17 Oct 2024 by Group-IB · last reported 17 Oct 2024

Last reported 2 years ago

What the reports say

1 report, newest first · the exact sentence from each

“*\ProgramData\regid.*.com[.]microsoft”

Group-IBVendor17 Oct 2024
Encrypted Symphony: Infiltrating the Cicada3301 Ransomware-as-a-Service Group

Indicators reported together

named in the same reports

xss[.]isin 1 report
hxxps://xss[.]is/members/376495in 1 report
2[.]windowsin 1 report
078163d5c16f64ca…e35e6879937bin 1 report
7b3022437b637c44…fde179bd984ein 1 report
3969e1a88a063155…4abd30553eabin 1 report
56e1d092c07322d9…935ca4d2f7e7in 1 report

Copy these 7 indicators · defanged

7 indicators, defanged, one per line

xss[.]is
hxxps://xss[.]is/members/376495
2[.]windows
078163d5c16f64caa5a14784323fd51451b8c831c73396b967b4e35e6879937b
7b3022437b637c44f42741a92c7f7ed251845fd02dda642c0a47fde179bd984e
3969e1a88a063155a6f61b0ca1ac33114c1a39151f3c7dd019084abd30553eab
56e1d092c07322d9dad7d85d773953573cc3294b9e428b3bbbaf935ca4d2f7e7

Thanks — we review every report.

Report a wrong value