921df888aaabcd828a3723f4c9f5fe8b8379c6b7067d16b2ea10152300417eaeSHA-256 hash

Reported by 1 independent source · first reported 20 Oct 2026 by CISA advisories · last reported 20 Oct 2026

Last reported 4 days ago

What the reports say

1 report, newest first · the exact sentence from each

“921df888aaabcd828a3723f4c9f5fe8b8379c6b7067d16b2ea10152300417eae”

CISA advisoriesGovernment20 Oct 2026
#StopRansomware: SafePay Ransomware

Indicators reported together

named in the same reports

173.194.194[.]94in 1 report
a0dc80a37eb7e271…ed228d9ff526in 1 report
bbdd3620a67aedec…02a6f4bc6f41in 1 report
stopransomware[.]govin 1 report
104.26.2[.]223in 1 report
140.82.114[.]4in 1 report
185.199.108[.]133in 1 report
77.37.49[.]40in 1 report
167.235.225[.]149in 1 report
5.255.11[.]134in 1 report
88.119.167[.]239in 1 report

Copy these 11 indicators · defanged

11 indicators, defanged, one per line

173.194.194[.]94
a0dc80a37eb7e2716c02a94adc8df9baedec192a77bde31669faed228d9ff526
bbdd3620a67aedec4b9a68b2c9cc880b6631215e129816aea19902a6f4bc6f41
stopransomware[.]gov
104.26.2[.]223
140.82.114[.]4
185.199.108[.]133
77.37.49[.]40
167.235.225[.]149
5.255.11[.]134
88.119.167[.]239

Also named with it: CVE-2024-40766, CVE-2023-27532, CVE-2020-3259, CVE-2023-20269, CVE-2024-40711

Thanks — we review every report.

Report a wrong value