Indicators of Compromise

SHA-256 Hash

TLP:CLEAR

0a6aae425a5e36f68b5da69157d2df4e7d836933adfd0696c389097ecb4a0fd7

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

995e6e0f90c58c82744545bf133b8c4c17decbe851953b0ffe5b21d625cade7d

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

5e16a71c7b99cb2780c31af34b268b78525b2b8fed55ff9e7bd4db8b1ba66f90

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

mirotvorec.rar

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

5.252.193.204

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

79fd962eb0c256f32786dab4d42cb416f6c1e6766bf0e2dcafdf5ffa2c5e61c1

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

nonimak.ru

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

naniga.ru

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

reapart.ru

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

92.242.62.96

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

http://lisingrout.ddns.net

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

statement.jpg

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

185.46.10.143

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

gorigan.ru

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

bokuwai.ru

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

185.158.114.107

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Chrome.lnk

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

librelogout.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

ohJlkad.txt

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Pterodo.RN

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Viktorovich.docx.lnk

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

xlsx.lnk

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

194.58.100.17

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

bitsadmin.space

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

hokoldar.ru

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Agent.GP

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

jolotras.ru

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

194.67.109.164

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

IconsCache.db

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

winlog.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

krashand.ru

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

libre4.space

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Pterodo.SV

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

config.exe

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

moolin.ru

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

docx.lnk

50% confidence

Added

2026-08-09

URL

TLP:CLEAR

https://moment-cat-qld-place.trycloudflare.com/sylvilagus

FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm

75% confidence

Added

2026-07-05

MD5 Hash

TLP:CLEAR

8e1624d110c090ff57d4b493a9107c66

FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

iiwdsxwamylbwwsoyrmj.supabase.co

FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm

75% confidence

Added

2026-07-05

MD5 Hash

TLP:CLEAR

1794369214b7f62e70a0485e61335c61

FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

quitethepastry.ru

FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

moment-cat-qld-place.trycloudflare.com

FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

efficiency-planes-emotions-fascinating.trycloudflare.com

FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm

75% confidence

Added

2026-07-05

URL

TLP:CLEAR

https://quitethepastry.ru

FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm

75% confidence

Added

2026-07-05

URL

TLP:CLEAR

https://efficiency-planes-emotions-fascinating.trycloudflare.com

FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm

75% confidence

Added

2026-07-05

URL

TLP:CLEAR

https://justsstop.ru/

Matryoshka #3/3: Gamaredon's Gammasteel Infostealer

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

justsstop.ru

Matryoshka #3/3: Gamaredon's Gammasteel Infostealer

75% confidence

Added

2026-07-05

Domain

TLP:CLEAR

complicaty.ru

ThreatFox: Unknown malware

40% confidence

Added

2026-05-14