multiple ransomware — Actor / APT
CASE-20260821-BD2D
MEDIUM
OPEN
Assignee: unassigned · Opened 1d ago
Opened from actor multiple ransomware
Entities
17
linked to case
IoCs
8
indicators
Entity types
3
dimensions
Evidence events
3
chain of custody
➕ Add anything to this case
Attach any entity — region, country, APT, source, MITRE technique, IoC, nation-state, campaign, data point, mission domain, CVE, malware, ransomware — and all linked entities are pulled in automatically.
🔎 IoC (8)
| Indicator | Role | Source | |
|---|---|---|---|
CVE-2021-31207 | indicator | pivot | search · workbench |
CVE-2021-34473 | indicator | pivot | search · workbench |
CVE-2021-34523 | indicator | pivot | search · workbench |
CVE-2018-13379 | indicator | pivot | search · workbench |
CVE-2019-19781 | indicator | pivot | search · workbench |
CVE-2022-41040 | indicator | pivot | search · workbench |
CVE-2022-41082 | indicator | pivot | search · workbench |
CVE-2024-1709 | indicator | pivot | search · workbench |
🏹 Actor / APT (1)
🛡 Vulnerability / CVE (8)
🤖 Case Operations
📜 Chain of Evidence (tamper-evident, hash-chained)
| When | Actor | Action | Entity | Source | Hash |
|---|---|---|---|---|---|
| 2026-08-21 15:36:52 | analyst | expand | actor: multiple ransomware | graph+live · 16 linked entities pulle | 1831374af8 |
| 2026-08-21 15:36:49 | analyst | add | actor: multiple ransomware | manual · primary | 2e1249ead4 |
| 2026-08-21 15:36:49 | analyst | open | actor: multiple ransomware | analyst · case created | 6562a21da6 |
Each record's hash chains to the previous, so any tampering is detectable. Export the full trail via the Evidence report.
📝 Case Notes (0)
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Attach all related IoCs as artifacts
- Run a response playbook per case type
- Escalate to legal when needed