Wanted — Malware
CASE-20260822-79F2
MEDIUM
OPEN
Assignee: unassigned · Opened 2d ago
Opened from malware Wanted
Entities
21
linked to case
IoCs
20
indicators
Entity types
2
dimensions
Evidence events
3
chain of custody
➕ Add anything to this case
Attach any entity — region, country, APT, source, MITRE technique, IoC, nation-state, campaign, data point, mission domain, CVE, malware, ransomware — and all linked entities are pulled in automatically.
🔎 IoC (20)
| Indicator | Role | Source | |
|---|---|---|---|
2be9ee7b46594e648c8bb06c4b7bf36e | indicator | pivot | search · workbench |
000a9f420e7e4df3baf95b0c4c6c6bd9 | indicator | pivot | search · workbench |
3e4de9e5b7f5477387031321fe8a6470 | indicator | pivot | search · workbench |
7b33028e22a94609927835f1475d99d3 | indicator | pivot | search · workbench |
3992cf07e26848bab7fd7b6bb58f60a2 | indicator | pivot | search · workbench |
d05d89f612304a3bb5eaf575fb7964fe | indicator | pivot | search · workbench |
9627161690684c62ada3daa4dee61645 | indicator | pivot | search · workbench |
3de0e2579cbb4847a84b9210a4d1c001 | indicator | pivot | search · workbench |
e3ce303ad18044b891071936e58b0ba2 | indicator | pivot | search · workbench |
bbf2d6b0a4e24fbfb98de2749d8696fc | indicator | pivot | search · workbench |
04d4aee30d154f21ae53948f4be7b52b | indicator | pivot | search · workbench |
714d720712d940389b85fd1535031e0c | indicator | pivot | search · workbench |
039685727e5a438abfd601b17e41e5ca | indicator | pivot | search · workbench |
3bd6151398a84bde8b7b4af3474ef5c3 | indicator | pivot | search · workbench |
b4ba813f6a2048cf8008726178dbb40e | indicator | pivot | search · workbench |
1faa04855c12465f88961677a65a7dec | indicator | pivot | search · workbench |
526a99e838eb48b581bde31de9130dbd | indicator | pivot | search · workbench |
a9c83daab608499a95ee547a51d55231 | indicator | pivot | search · workbench |
cbcf79b08004491e9f395edc6a8ef823 | indicator | pivot | search · workbench |
6432636baed2441c9a4c0ae9b4bc4323 | indicator | pivot | search · workbench |
🦠 Malware (1)
🤖 Case Operations
📜 Chain of Evidence (tamper-evident, hash-chained)
| When | Actor | Action | Entity | Source | Hash |
|---|---|---|---|---|---|
| 2026-08-21 23:33:22 | analyst | expand | malware: Wanted | graph+live · 20 linked entities pulle | e088ec048e |
| 2026-08-21 23:33:20 | analyst | add | malware: Wanted | manual · primary | e02e76f46e |
| 2026-08-21 23:33:20 | analyst | open | malware: Wanted | analyst · case created | e35bcb5d32 |
Each record's hash chains to the previous, so any tampering is detectable. Export the full trail via the Evidence report.
📝 Case Notes (0)
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Attach all related IoCs as artifacts
- Run a response playbook per case type
- Escalate to legal when needed