IOC du rapport source : https://www.zscaler.com/blogs/security-research/sloppyrat-new-tool-ransomware-attacks
Affichage neutralisé. Un observable associé n'est pas une preuve de compromission ni une consigne de blocage.
domain	9342371634011778[.]com	active
domain	linked4x[.]com	active
domain	skipraid[.]com	active
md5	1c15653d8428e69ff2cadf3a3a1f506f	active
md5	5731f763100773be35669757b8accc95	active
md5	5966d07d4cb3a9241fe4df0ad70ad665	active
md5	f52464f721825936cd1338eac49ece10	active
sha1	3f90411b3a3ed8cbe079db215a9bf68b9017a9fc	active
sha1	70e1412bd5ff942cb85233764968349e0181683e	active
sha1	7b52af88cbd890b1d547729adf40b8d94c7cace6	active
sha1	d5435129570d9656dc7d9f6578a291d173025e4d	active
sha256	00c116e498799dc831c8aeb602349296c4b9325535d674fe2b6e2e091878dcec	active
sha256	1439990ff65364a0f608a322aa3a493bc1683cb5fc30cffc44948da29623fffd	active
sha256	2f3d95de716f330fad2330d8787ebdbecb3322453bdc41b2113427f9f92d32d2	active
sha256	3a8994928f512fffcb32e117ac45e0ee093541d99a9dba5f69a264f7f3054b19	active
sha256	466f9b8dce77b3a026fe4f833aa4949784fb854bea4137e52609e857d439dec8	active
sha256	4ecb2d06510dfee1b67f5d9a68c60f6d09ddb5be36cc1766a41d77c5b89d3a56	active
sha256	518cd57a303ff7ac2b5c4c8439aa5bcbf9a287d4653de7b76051bde73a94d064	active
sha256	607212cfe73c5c84b2dd95b2c0ff37a47f4c8aad08e6d5cbb7c19a62c6b765f9	active
sha256	680c3a9f5fdddfcc34856c7a67d21bbdd2b47d70bdfb829ff59cfa0e3bc72d21	active
sha256	6d50bb50d4e7d6ac36ca6d2761f382be8e1ddbebf3cdf4733cf989ba291f9013	active
sha256	7bb025b426ae6ccbc170fbca58634b8dd77a61447e48dabe9c2e2fb0d339d8b7	active
sha256	8774533134d9d1514106c4090a0c5bccab4550facdcfe03f4e02b9764343a990	active
sha256	93273ea09bd9df881a594db8cfe1b1bbc54f40f623f44427278ae96fb9b46490	active
sha256	971f25f84be88c4fd304d555b5e3da12f6b368e4b9ba0943961ff21ba6fa4d4d	active
sha256	9f84cfcf988530941555d1cb7780a091743cf567396201eff7731f5475768f9a	active
sha256	a13fcbb0870f2fabb7e0a8c757ee3b763bd4a4b0cdf59eeff981d8e307fcf316	active
sha256	af4c426b8c4b3b4957875206948eedae09b670f349f2ffb70df7b7a6b06cd588	active
sha256	bdcf8fe230e23692b658b62b6547374e2234f2a497b19d26637018a1839e6dfd	active
sha256	c0ef62a2d5ca11c2eedad3561d5d1d8b6e9847aa6b8613493e5bc233ece3d189	active
sha256	cb9930d0cde5bf8e8a7ad08fe2c60b937c7beaf9ab51b03191dfcaba40b7b189	active
sha256	eaa52d2d6d4daf29157e8e813247fb2e92797324230ee42c79f7861b2f5c341d	active
sha256	f534a957edec74d69081665309311b791b6d11a3221fffa67744812d73ad98eb	active
sha256	ff142fc192daa2a83bc565e5b38ebbe05561f3a19c7fc2d08e38c97e1986bbc5	active
url	hxxp[:]//skipraid[.]com/dsVGmQTrzX/default2	revoked