Indicators of Compromise

Domain

TLP:CLEAR

dlock.liveblog365.com

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

75% confidence

Added

2026-08-11

Domain

TLP:CLEAR

deadlockblog.great-site.net

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

75% confidence

Added

2026-08-11

Domain

TLP:CLEAR

deadlockblog.medianewsonline.com

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

75% confidence

Added

2026-08-11

Domain

TLP:CLEAR

deadblogdbdu5wprek7wa2o4ce7rnt6u6ntqeud3hzjjcveosgpsqqqd.onion

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

75% confidence

Added

2026-08-11

SHA-256 Hash

TLP:CLEAR

a1fdf65020ce4a0f0940c793c6425baf8a0b994ec48b9baaf72788661a9d29f4

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

75% confidence

Added

2026-08-11

Domain

TLP:CLEAR

polygon.meowrpc.com

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

75% confidence

Added

2026-08-11

Domain

TLP:CLEAR

deadlock.liveblog365.com

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

75% confidence

Added

2026-08-11

URL

TLP:CLEAR

http://1rpc.io/matic

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

75% confidence

Added

2026-08-11

Domain

TLP:CLEAR

reciver.address.slice

50% confidence

Added

2026-08-09

SHA-1 Hash

TLP:CLEAR

235d6bdf25437b0b004152a263cb483aac08fd10

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

c8e16b76ae25d2f27e581a9bef134ea8

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

processes.The

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

reciver.pk

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

505d23c7a66a02239056ac3cfed24132

50% confidence

Added

2026-08-09

SHA-1 Hash

TLP:CLEAR

45f7f7e87d18fbe71745a0cc170ae08571c2ba0d

50% confidence

Added

2026-08-09

SHA-1 Hash

TLP:CLEAR

2204d64b82765db4598714fe8bc6e71a24958a7f

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

4374eb7807fbcb767ae3a6202b4dd8f8

50% confidence

Added

2026-08-09

MD5 Hash

TLP:CLEAR

9a4dcce25a87819585aa0a1dd16186c8

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

BABUK.MARIO

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Aimlabs.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

ME.F8C6A8.txt

50% confidence

Added

2026-08-09

SHA-1 Hash

TLP:CLEAR

e5ba4affd0f49a9e451aa913115cf16b481fe1dc

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Dcomcnfg.exe

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://biggoalsports.co.za/minif.php

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

c9cc95ff8f2998229394dfd31c2bd6b723e826a3ca5e008d2b5be19ba419ae2c

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

svhost.exe

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

be1037fac396cf54fb9e25c48e5b0039b3911bb8426cbf52c9433ba06c0685ce

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://nmsneustadtl.ac.at/xml.php

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://envisionreg.com/wp-activate.php

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

94.74.164.207

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

138.226.236.51

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

3c1b9df801b9abbb3684670822f367b5b8cda566b749f457821b6481606995b3

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

3cd5703d285ed2753434f14f8da933010ecfdc1e5009d0e438188aaf85501612

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http:///prrq.php

50% confidence

Added

2026-08-09