Indicators of Compromise

Domain

TLP:CLEAR

bleepingcomputer.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

cysecurity.news

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

WmiExec.py

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

threatdown.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

malware.news

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

liberty.co.za

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

XSS.is

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Exploit.IN

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

j.jad

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

finance.View

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

thecyberthrone.in

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

techrepublic.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

scworld.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

cybersecuritynews.com

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

j.pscychresns

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Sorint.Sec

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Ajina.Banker

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

SideWinder.AntiBot.Script

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Forbes.ru

50% confidence

Added

2026-08-09

Email Address

TLP:CLEAR

pandrews@vcu.edu

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

j.tics

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

j.neubiorev

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

j.brainres

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

j.neuroimage

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

j.beth

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

trojanrecords.tmstor.es

50% confidence

Added

2026-08-09

IPv4 Address

TLP:CLEAR

212.80.7.74

50% confidence

Added

2026-08-09

SHA-1 Hash

TLP:CLEAR

9d94e2a15b75e1ef4487429ac71fc13e186c4a2d

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

MD5 Hash

TLP:CLEAR

17dd3f59f13f54a34761cef0c2b73cd7

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

Domain

TLP:CLEAR

festung-e.duckdns.org

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

Email Address

TLP:CLEAR

prinzeugen@mail2tor.co

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

Email Address

TLP:CLEAR

standardbankcc@cock.li

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

Domain

TLP:CLEAR

old-pidop.ru

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

Domain

TLP:CLEAR

g-captchafestung.sbs

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

Domain

TLP:CLEAR

captchafestung.sbs

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

Domain

TLP:CLEAR

darkempire.fun

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

URL

TLP:CLEAR

https://212.80.7.74/stager/mini

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

URL

TLP:CLEAR

https://212.80.7.74/stager/ps1

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

URL

TLP:CLEAR

https://212.80.7.74/serverscan.ps1

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

Domain

TLP:CLEAR

prinzfkbjiazbrur4mjje6mntjc4vydx3iatkkzycufoylqcoo4y7pqd.onion

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

SHA-256 Hash

TLP:CLEAR

686213cc11d36af764de824801bced9366dfca3823fe0d51b752f74149bcf1f4

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

Domain

TLP:CLEAR

6cudc5cqa2bjpwdhcwm2lj6dbqejjjqzeo6ipwvmbazr6cgu7vfk3dad.onion

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25

Domain

TLP:CLEAR

stndrdbnk.cc

Prinz Eugen ransomware: a deep dive into a new Go-based encryptor

75% confidence

Added

2026-07-25