IoC Investigation

b5d917b6da985fb0d9539e38d83fffc5bb4d371ac103a402e0d7aff329c1203d

HASH_SHA256 IN DATABASE

SHA-256 Hash · threat 0.50 · 4× seen · 0 datasets · Ransomware · last seen 4h ago

🔄 Pivot:📁 Ransomware

Threat Score

0.50

Sightings

4
0 sources

Detected Type

HASH_SHA256

Enrichments

0

Related IoCs

20
Full OSINT Pivot + Case Create Case Takedown Export STIX/MISP ← Browse All

File Hash — Sandbox & Detection

Detected SHA256. Pivot to sandboxes and malware repositories for detonation reports and family attribution.

↗ VirusTotal ↗ MalwareBazaar ↗ Hybrid Analysis ↗ Triage

Seen in Datasets (0)

Not linked to any dataset.

OSINT Pivots

Full OSINT (30+ lookups) ↗ VirusTotal ↗ MalwareBazaar ↗ Hybrid Analysis ↗ Triage ↗ ThreatFox ↗ MalShare Link Analysis ↗ OpenSanctions

Related Indicators (20)

Indicators sharing the same category.

IndicatorTypeCategoryThreat
trzobridg.zapier.app DOMAIN Ransomware investigate →
twu-hwt.org DOMAIN Ransomware investigate →
updatemycomcast.weebly.com DOMAIN Ransomware investigate →
www.knockknock.top DOMAIN Ransomware investigate →
xfinityloginconnect.weebly.com DOMAIN Ransomware investigate →
xfinityloginservice.weebly.com DOMAIN Ransomware investigate →
xfinitypageupdate.weebly.com DOMAIN Ransomware investigate →
preciosasjoyitas.com.mx DOMAIN Ransomware investigate →
https://www.ransomware.live/id/VG9wTWFyayBGd… URL Ransomware investigate →
topmarkfunding.com DOMAIN Ransomware investigate →
https://www.ransomware.live/id/Q29udHJvbCBDb… URL Ransomware investigate →
zoominfo.com DOMAIN Ransomware investigate →
controlconceptstexas.com DOMAIN Ransomware investigate →
https://www.ransomware.live/id/d29ybGR0dWJlQ… URL Ransomware investigate →
worldtube.co.kr DOMAIN Ransomware investigate →
https://www.ransomware.live/id/aGVhbHRoY2FyZ… URL Ransomware investigate →
https://images.ransomware.live/victims/6581c… URL Ransomware investigate →
healthcarehighways.com DOMAIN Ransomware investigate →
http://hptqq2o2qjva7lcaaq67w36jihzivkaitkexo… URL Ransomware investigate →
https://www.ransomware.live/id/UHJlZmVycmVkI… URL Ransomware investigate →

Copy as STIX 2.1 

{
    "type": "indicator",
    "spec_version": "2.1",
    "id": "indicator--76c91077-743d-4165-14c8-0000c3ee2a57",
    "created": "2026-08-06T23:43:13Z",
    "modified": "2026-08-06T23:43:13Z",
    "name": "SHA-256 Hash: b5d917b6da985fb0d9539e38d83fffc5bb4d371ac103a402e0d7aff329c1203d",
    "pattern": "[file:hashes.'SHA-256' = 'b5d917b6da985fb0d9539e38d83fffc5bb4d371ac103a402e0d7aff329c1203d']",
    "pattern_type": "stix",
    "valid_from": "2026-08-06T23:43:13Z",
    "labels": [
        "ransomware"
    ],
    "confidence": 50
}

Linked Cases (0)

Not linked to any case yet.

+ Add to Case Create Alert
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center