Bashe Active

Also known as: APT73 variant
Data extortion group formerly known as APT73. LockBit infrastructure copycat.
PDF Report Back to Groups
0
Total Victims
2024-04-01
First Seen
N/A
Last Seen
0
Known TTPs
3.7d
Avg Delay
0
Negotiations
ONION URLS
bashex7mokreyoxl6wlswxl4foi7okgs7or7aergnuiockuoq35yt3ad.onion
basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onion
basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion
basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onion
bashete63b3gcijfofpw6fmn3rwnmyi5aclp55n6awcfbexivexbhyad.onion
TOOLS
Custom tools
FILE EXTENSIONS
.bashe
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
Date Victim Name Country Sector Status
No victims recorded

No TTPs data

No YARA rules

TypeValueDescriptionCopy
tox 7EBAE1BD3CB9FA5BB6DFF42C572BEF3DB6EFBBC3BAF337CF3E7AD7AB8B04EFFA524AECC60B1F Tox messenger ID observed in Bashe attacks
sha1 68378d99287cbbe912b0d95aab362aa6a4625f15 Associated with Bashe ransomware
btc bc1qkld4dtve1bxkh3x0kptksowbmac3lmd9br9fsa Associated with Bashe ransomware
sha1 24d4743dd958822a836f1a266f19ab2705a21a77 Infrastructure linked to Bashe
sha256 8a538d0075abfe5c8586edc9614f7b29f4add1598556d734a23e14a0d0f1368e Ransomware binary hash observed in Bashe attacks
sha256 a821690d70906efc178fdafe76d08c095d138b0b5902ca637a2db16b5322b45d Ransomware binary hash - Bashe campaign
sha1 029dda67a7fa8f7bd60003acc39bec6697456d6d Infrastructure linked to Bashe
btc bc1qxrgztjyp3u7omkbnp1vkfa0c9jtmbn95a8y6nq Bitcoin ransom address observed in Bashe attacks
md5 831b40fe6954f47dcf4f3a967586bb5e Malware sample hash - Bashe campaign
btc bc1qkf19t84218rcfsd38qgmum6ryvtx7rl85itypo Bitcoin ransom address observed in Bashe attacks
tox 7328C0D482AC2DA9111960D40BC4DEB0DE0BAED401FFEBDFFA27BE83FCDAFB3B38C7FB87F0FD Associated with Bashe ransomware
md5 2085b20b8d093c3fff70b8ba221fdd95 Malware sample hash observed in Bashe attacks
md5 955b4f451fe40b29514431e7375fbc40 Infrastructure linked to Bashe
email decrypt137@keemail.me Associated with Bashe ransomware
tox EDC8D17A14FC28F9D29FFBFA3EDB422F4A7DEFD8138E6813DBEDE8C7CDAAD4DFB2A3EABBDCCD Tox messenger ID observed in Bashe attacks

No ransom notes