Rhysida Ransomware Indicators of Compromise

SHA-256 HASH					DETECTION NAME
69b3d913a3967153d1e91ba1a31ebed839b297ed	Ransom.Win64.RHYSIDA.THEBBBC
338d4f4ec714359d589918cee1adad12ef231907	Ransom.Win64.RHYSIDA.THFOHBC
b07f6a5f61834a57304ad4d885bd37d8e1badba8	Ransom_Rhysida.R002C0DEV23
						Ransom.Win64.RHYSIDA.SM
39649fa040a3c6894758016a65afec7b6acd4017	Ransom.Win64.RHYSIDA.SM
4947cf015875b169b6509a279941e854b022dd8e	Ransom.Win32.RHYSIDA.YXDGTT
c27a865b3ab1f0bd2ea1e8f7298b5ef9348c5ac		HZ_PSEXESVC
96dc78c00a622c3df5e038b8ed41b2de68e6c350	Trojan.PS1.SILENTKILL.A
df96143540d36edf1b9d9d25d91778855cafa8a6	Ransom.PS1.RHYSIDA.YXDHJ 
a1034cdc499b4c551e43bc259d10928d75293214	Trojan.PS1.SILENTKILL.THHOIBC
de52c40ca449c7285660541c84ac5d6fe78a6bff	Trojan.PS1.SILENTKILL.YXDHHT
e14ee9ad241517ef72a4c6561fb848f6d659e764	Trojan.JS.QAKBOT.SFSJ


URL									DESCRIPTION
rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad[.]onion	Rhysida leak site