Indicators of Compromise

Domain

TLP:CLEAR

Filecoder.Beast

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

psexesvc.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

system.conf

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

ad.security

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

mimik.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

encrypter-windows-gui-x86.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

symantec.exe

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

g11.sys

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://allegrolokalnie.lokalna-oferta6222782.sbs/oferta/kingston-fury-beast-32gb-ddr5-6000mhz-cl30-kit-2x16gb-amd-expo/813780112

PhishTank: http://allegrolokalnie.lokalna-oferta6222782.sbs/oferta/kingston-fury-beast-32gb-ddr5-6000mhz-cl30-k...

90% confidence

Added

2026-08-05

URL

TLP:CLEAR

https://www.beastiemania.com/gigog/show.php?g=%22%2F%3E%3Cimg%20src%3D%22https%3A%2F%2Fgoogle.com%2FAkGeWN0PsWgSy.jpg%22%20onerror%3D%22window.location%3DdecodeURIComponent%28atob%28%27Njg3NDc0NzA3MzNhMmYyZjY1NzI2ZTY1NzU2NTcyNmUyZTczNzA2YjJkNzQ2MTZlMmU3NDZmNzAyZjczNzQ2MTcyNzQyZTcwNjg3MDIzNzQzMTRkNTM0YzcwNzg3OQ%3D%3D%27%29.replace%28%2F%28..%29%2Fg%2C%20%27%25%241%27%29%29%3B%22%3E

PhishTank: https://www.beastiemania.com/gigog/show.php?g=%22%2F%3E%3Cimg%20src%3D%22https%3A%2F%2Fgoogle.com%2F...

90% confidence

Added

2026-08-04

SHA-256 Hash

TLP:CLEAR

e097f3b445b63b07afacde8d6a67f0be654dd51e228a3610fb0710a1f7e29a69

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

9fae3f15900e13ec3860a109555ecd33ca43d38907c63438c50a2d6d91bfee1d

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

8ff1c1967841a595d996a649c8134b7a5970dcf94624b237d1b089e7c6266167

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

5c4c98d774eb100f9a89ae4e984c27a4f532e58c7cf8c87046dc87db5a065404

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

19bab15a34d5ad838ccf4d187eb40379c335fa56446d0f9621865b2767d4ac7d

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

35296e7a34688ca3e3159bcdf92b4d60ba4173a2369aca531bb7bc959f68ed9c

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

ece33e4b7e2d26eeca8ad9db4439f9801a7a77e332611116156738b1b0316046

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

17fb52476016677db5a93505c4a1c356984bc1f6a4456870f920ac90a7846180

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

e736229e890a138ccf7810e00a6bb50d

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

10955a02ef3fd3f80f20062c401bf7960ff6ce94

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

2d91a78e739891c9854c254f5b2a6b84c0e167dfa253466cbccd2cdd1c20145d

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

07e9f0b8627a95960e79e930fb099e84

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

56bee9df5833a637f5c54d5911df98b0812fe643

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

d29670e684e40ddc89b47010c37cbc96737035b6

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

233b795102dd9cd630aebddfe3c15bbb

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

b29f91a440527fb621d106a2048f6379fff3263c60aeda9c82ff8c1d5ae880a8

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

4277a6be9b121a30564aca6ba32db272

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

8e776dbb71eb8f42dffd3020175edef5

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

7b01f64b7818d315ef7a2485c4ce2a5d6896cb58

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

7d33e173819ecd502f790bf6d3da260a82dedfa2

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

faca9e856c369b63d6698c74b1d59b062a9a8d9fe84b8f753c299c9961026395

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

863fa58aa1fe8a88626625b191d4722e

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

e7fb4bf69be5ac4583c0c02e26a17bd3cdef4c02

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

45126297c07c6ef56b51440cd0dc30acf7b3b938e2e9e656334886fe2f81f220

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

MD5 Hash

TLP:CLEAR

fc3b93e042de5fa569a8379d46bce506

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-1 Hash

TLP:CLEAR

1ba499bafaa369be58e795a150403c8729ef5d95

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

c92580318be4effdb37aa67145748826f6a9e285bc2426410dc280e61e3c7620

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

8e4b218bdbd8e098fff749fe5e5bbf00275d21f398b34216a573224e192094b8

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

5e85446910e732111ca9ac90f9ed8b1dee13c3314d2c5117dcf672994ce73bd6

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

SHA-256 Hash

TLP:CLEAR

141b2190f51397dbd0dfde0e3904b264c91b6f81febc823ff0c33da980b69944

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

75% confidence

Added

2026-07-12

Domain

TLP:CLEAR

hypebeast.co.com

ThreatFox: AsyncRAT

65% confidence

Added

2026-05-26

Domain

TLP:CLEAR

dabeastmc.no-ip.biz

AppendixD_Extracted DC Configuration.csv

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

beastman.zapto.org

AppendixD_Extracted DC Configuration.csv

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

dbbe792e6c804518909f8990a836552573522d126547429d6cd3fcb1f60d542c

Beast Windows Encryptor

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

dd09a2ef31d018fd83f186e3eaaccccdaa8a8c8779ced668abb06dc934d89a2d

Beast Windows Encryptor

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

e01f5c7067dc984dceb883b10444b1a5b0f22ebd500baf9d9a88207f5033285d

Beast Windows Encryptor

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

4c44ac1eea4bc7f4ea542d611b5658d7ac2729d79abe750da83f1581cd832eaf

Beast Windows Encryptor

70% confidence

Added

2026-05-06

SHA-256 Hash

TLP:CLEAR

369034bf1d793fe56ea4d683a156722d825ad9829fc128117f82a26bc1d0480b

Beast Windows Encryptor

70% confidence

Added

2026-05-06

Domain

TLP:CLEAR

offroadbeasts.com

C2

90% confidence

Added

2026-05-06