Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group: Wannacry

Discovered by ransomware.live: 2017-05-12

Estimated attack date: 2017-05-12

Country: FR


Infostealer activity detected by HudsonRock

Compromised Employees: 37

Compromised Users: 4518

Third Party Employee Credentials: 11


External Attack Surface: 117


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domainet@renault.fr
  • dnsadmin@renault.fr
  • tldsupport@cscglobal.com
MX Records
  • mx2.hc1506-8.eu.iphmx.com.
  • mx1.hc1506-8.eu.iphmx.com.
TXT Records
  • amazonses:QUKhSLJKMRk3s4yhtirjD4eNnkTIdnLHSWMUQIVRFS4=
  • google-site-verification=pO2khc6p7u6astfK330-gKvTucOtOvCIUVeySj-uw_4
  • _z98j875zbwtrhjudb3k4gofgk440yun
  • v=spf1 a ip4:93.188.175.83/32 ip4:46.19.179.83/32 ip4:193.194.133.7 ip4:31.15.26.165 include:smtp.renault.com include:mailsrv.fafpro.fr include:mailgun.org exists:%{i}.spf.hc1506-8.eu.iphmx.com -all
Cloud / SaaS Services Detected
Amazon SES/WorkMail Mailgun