Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Anubis

| Active

None

Victims

42

First Discovered

victim

2025-02-25

Last Discovered

victim

2026-01-08

Inactive Since

in days

3

Avg Delay

between attack and claim

N/A

Infostealer

for victim with domain

20.0%

View Victims on World Map

View group statistics

Known Locations (1)

Favicon	Title	Type	Available	Last Visit	Server Info	FQDN
	Captcha		Yes	2026-01-11 13:31:46	nginx	`om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion`

Target (Available)

Heatmap (Available)

Ransom Notes (0)

Tools Used (Not Available)

Vulnerabilities Exploited (0)

TTPs Matrix (0)

Negotiation Chats (0)

YARA Rules (0)

Indicators of Compromise (IoCs) (30)

IP 4 MD5 25 TWITTER 1

Type	IOC
`ip`	`38.134.148.20`
`ip`	`5.252.177.249`
`ip`	`212.224.107.203`
`ip`	`195.133.67.35`
`md5`	`a1765503f1405b24b77a16071e6ea6f6`
`md5`	`d2410703e93be61a652b92efcf42789d`
`md5`	`0a5f3fc92af7aa3e448ac7b84e495fc6`
`md5`	`271998018494403a9b5d0d4b01eb0c44`
`md5`	`8a12e997e672b80319c5b852b237e5a9`
`md5`	`f71d8db7fda7659718330efcbd0776f0`
`md5`	`0f1b8aa83e5f9c40ad32561a95ed2c67`
`md5`	`71ce395e8bb531ec3623b94387de8392`
`md5`	`284d536dab5865150873e927a29cb0ae`
`md5`	`a4b88bf440613390cd32e045a59fd7b0`
`md5`	`c66022aa8b77a95c9b78a8743657f830`
`md5`	`24eae2bb569d97018d343fff50112dab`
`md5`	`f8a242fa6a8df6eafded0a6987a5ac09`
`md5`	`1b701df9e6b5252feef3d1d8dcfe12f5`
`md5`	`d9a053e54be4003cc28b41fe30790349`
`md5`	`994a0c3e3e1390d972b1bdd8e8f2a449`
`md5`	`4f178cefbf3fc66baed13b3c4fa897d4`
`md5`	`054d432e231e8ee6e301675ef2bd598d`
`md5`	`832feae0378a9b36c4958812735b6d81`
`md5`	`241d01f08172a117268eb0f223348e47`
`md5`	`a2d853247d939106231314bc5b233bda`
`md5`	`5334cbddd1128f87308c0725d2cb012e`
`md5`	`ed2510198b03435570d72ce274bc245c`
`md5`	`9ef845add689fc71cae33686139efbb0`
`md5`	`f1b5f6edfba8bf1312f65e7f2787c72f`
`twitter`	`@Anubis__media`

Victims (42)