Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in
Get started About
User Guide
Log in Get started
Threat Actors montage

montage

TLP:CLEAR
Active
Kill Chain Analysis Generate Graph Hunt Package

Also known as: root access, UNC6780, Bob, is an American Youtuber, LordMinion777, a Dutch Angle, a botnet

Description

1 ransom note(s) on file

Goals & Targeting

Objectives

Ransomware
Financial Gain

Targeted Sectors

Financial services
Government
Media
Critical infrastructure
Defense
Hospitality
Telecommunications
Aviation
Transportation
Manufacturing
Healthcare
Energy
Utilities
Information technology

Targeted Countries / Regions

CN
US
RU
IT
IR
PL
IL
MX
CA
UA

AI Analysis

No AI analysis yet.

Campaigns / Victims

No campaigns linked yet.

Observed Data

No observed data linked yet.

Indicators of Compromise

View all →
Domain 10 SHA-256 Hash 8 MD5 Hash 1 Filename 1
Domain 10
eliteautoused-cars.com
50% TLP:CLEAR
httpecured.im
50% TLP:CLEAR
r2.dev
50% TLP:CLEAR
lankystocks.com
50% TLP:CLEAR
chata2go.com.mx
50% TLP:CLEAR
easyguidepdf.com
50% TLP:CLEAR
sherwoods.ae
50% TLP:CLEAR
waynelimck.com
50% TLP:CLEAR
store-na-phx-1.gofile.io
50% TLP:CLEAR
screenconnect.com
50% TLP:CLEAR
SHA-256 Hash 8
c862dbcada4472e55f8d1ffc3d5cfee65d1d5e06b59a724e4a93c7099dd37357
50% TLP:CLEAR
af651ebcacd88d292eb2b6cbbe28b1e0afd1d418be862d9e34eacbd65337398c
50% TLP:CLEAR
9827c2d623d2e3af840b04d5102ca5e4bd01af174131fc00731b0764878f00ca
50% TLP:CLEAR
98a4d09db3de140d251ea6afd30dcf3a08e8ae8e102fc44dd16c4356cc7ad8a6
50% TLP:CLEAR
edde2673becdf84e3b1d823a985c7984fec42cb65c7666e68badce78bd0666c0
50% TLP:CLEAR
c6097dfbdaf256d07ffe05b443f096c6c10d558ed36380baf6ab446e6f5e2bc3
50% TLP:CLEAR
947bcb782c278da450c2e27ec29cb9119a687fd27485f2d03c3f2e133551102e
50% TLP:CLEAR
36fdd4693b6df8f2de7b36dff745a3f41324a6dacb78b4159040c5d15e11acb7
50% TLP:CLEAR
MD5 Hash 1
575e7adf57f741ba8ce32bfe83a1e7f4
50% TLP:CLEAR
Filename 1
RMM.exe
50% TLP:CLEAR
Open in full Indicators list →

References

  1. www.malwarebytes.com — Cited by web research for: root access
  2. cloud.google.com — Cited by web research for: UNC6780
  3. www.microsoft.com — Cited by web research for: ScreenConnect
  4. pmc.ncbi.nlm.nih.gov — Cited by web research for: GitHub
  5. www.cyber.gc.ca — Cited by web research for: Rogue

Intel Summary

26

Techniques

40

Tools

0

Campaigns

40

IOCs

0

Observed Data

7

Tactics

Details

Type
Criminal
Sophistication
Medium
Primary Motivation
Organizational gain
Country of Origin
China (CN)
Confidence
80%
Added
Aug 13, 2026
Notes
0
Log in to add a note
No notes yet. Click "Add Note" to create the first analysis note.
Opinions
0
Log in to add an opinion
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.