GhostLocker - A “Work In Progress” RaaS [Tuesday, November 14, 2023]

GhostLocker - A “Work In Progress” RaaS [Tuesday, November 14, 2023]
https://www.securitricks.com/content/images/size/w600/format/webp/2023/12/ATTACK-REPORT-LOGO-2.png
Report

GhostLocker - A “Work In Progress” RaaS

Description :
What makes the current landscape unusual is the entry of hacktivist groups into this domain. One such group, GhostSec, has introduced a novel Ransom-as-a-Service encryptor known as GhostLocker.

Published :
2023-11-14T17:56:02.402Z

Created :
2023-11-14T17:56:02.402Z

Modified :
2023-11-14T18:03:34.911Z

Tags

  • iot
  • ransomware
  • raas
  • python
  • ghostsec
  • nuitka
  • ghostlocker
  • imao.html

Indicators

URLs :
  • http://88.218.61.141/incrementLaunches
  • http://88.218.62.219/download
  • http://88.218.61.141/add
Hashes :
  • 9b6be74c2c144f8bcb92c8350855d35c14bb7f2b727551c3dd5c8054c4136e3f
  • 0e484560a909fc06b9987db73346efa0ca6750d523f2334913c23e061695f5cc
  • 663ac2d887df18e6da97dd358ebd2bca55404fd4a1c8c1c51215834fc6d11b33
  • 15d874e24caf162bc58597ac5f22716694b5d43cf433bee6a78a0314280f2c80
  • ee227cd0ef308287bc536a3955fd81388a16a0228ac42140e9cf308ae6343a3f
  • abac31b5527803a89c941cf24280a9653cdee898a7a338424bd3e9b15d792972
  • 7e14d88f60fe80f8fa27076566fd77e51c7d04674973a564202b4a7cbfaf2778
Attacks Pattern :
  • T1486
  • T1104
  • T1059
  • T1087
  • T1071
External References :

You can download the txt file containing the indicators by clicking on the button below:

About the author
Julien B.

Securitricks

Up-to-Date Cybersecurity Insights & Malware Reports

Securitricks

Great! You’ve successfully signed up.

Welcome back! You've successfully signed in.

You've successfully subscribed to Securitricks.

Success! Check your email for magic link to sign-in.

Success! Your billing info has been updated.

Your billing was not updated.