Gunra
| Active
Gunra is a financially motivated ransomware group that emerged in April 2025, using double-extortion tactics against real estate, pharmaceuticals, and manufacturing sectors across Japan, Egypt, Panama, Italy, and Argentina, deploying separate Windows and Linux variants with a strict five-day payment deadline.
Victims
54
First Victim
2025-04-07
(est. attack date)
Discovery Date
2025-04-23
Last Seen
2026-09-04
Inactive Since
12
days
Avg Delay
9.2
days
Infostealer
26.4%
victims with domain
Countries
28
hit
Uptime
96.1% avg (30d)
Attack Velocity — Last 12 months (based on attack estimated date if available)
-33% vs last month
Known Locations (3)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
Public Data Share | No | 2026-08-22T08:56:35 |
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad.onion
|
||||
|
G*NRA | Yes | 2026-09-16T21:26:27 | nginx |
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd.onion
|
|||
|
G*NRA | Yes | 2026-09-16T21:27:00 | nginx |
www.lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd.onion
|
Target
Top 5 Activity Sectors
- Manufacturing 13
- Professional Services 9
- Healthcare 8
- Technology 6
- Financial Services 4
Top 5 Countries
-
Korea, Republic of
6
-
Brazil
6
-
Spain
4
-
Uruguay
3
-
Thailand
3
Heatmap
Ransom Notes (2)
YARA Rules (1)
Indicators of Compromise (IoCs) (30)
Email
3
Hash MD5
16
IP Address
1
Session
1
Tox
4
URL
5
Victims (54)
Sector: Agricultural Biotechnology & Fertilizer | Revenue: US$ 5,000,000…
Sector: chemical additives and heat stabilizer | Revenue: US$ 20,000,000…
[AI generated] Cablematic Dos Mil SLU is a Spanish company operating in the electronics and technolo…
[AI generated] Thai Petroleum & Trading Co., Ltd. is a company based in Thailand operating in the pe…
[AI generated] Eric Davis Dental is a dental practice based in the United States. The company operat…
[AI generated] Triotech is a Singapore-based technology company operating in the IT solutions and se…
[AI generated] KUKJE PHARM CO., LTD is a South Korean pharmaceutical company engaged in the manufact…
[AI generated] INHA University is a private research university located in Incheon, South Korea. It …
[AI generated] Samwha Capacitor Group, founded in 1973 in South Korea, is a global company manufactu…
[AI generated] Seoul Guarantee Insurance (SGI) is a South Korean company specializing in credit and …
[AI generated] ACCS Le Groupe is a French-based company specializing in the delivery of IT solutions…
