Hammer Active
Ransomware group first observed in 2022. Uses Cloudflare Tunnel for deployment.0
Total Victims
2022-06-01
First Seen
2026-02-17
Last Seen
0
Known TTPs
43.8d
Avg Delay
0
Negotiations
ONION URLS
id4e7r2psqcdttlyuwcz75vghya4rfq6dudzv55ii4uobjymqshhiin2.onion
TOOLS
Cloudflare Tunnel
SystemBC
Brute Ratel
ScreenConnect
Rubeus
FILE EXTENSIONS
.help
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| No victims recorded | ||||
No TTPs data
No YARA rules
No IoCs
No ransom notes