TarantulaStrike Active

Ransomware group first observed in 2019. Uses LaZagne for deployment.
PDF Report Back to Groups
0
Total Victims
2019-05-01
First Seen
2026-03-02
Last Seen
0
Known TTPs
19.9d
Avg Delay
0
Negotiations
ONION URLS
d2mmsdq5pjpq52v5wzxjovkmtqujuetlhsisthv6ufd7q2fp72hhubij.onion
TOOLS
LaZagne TrickBot TDSSKiller SharpDPAPI
FILE EXTENSIONS
.hack
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
Date Victim Name Country Sector Status
No victims recorded

No TTPs data

No YARA rules

TypeValueDescriptionCopy
ip 26.52.133.31 C2 server IP - TarantulaStrike campaign
ip 75.189.225.98 C2 server IP - TarantulaStrike campaign
tox AAD030D9AAEAAA9A7AA455FCA6C12A10782DFDDB0F8391556AFC2DFA33CCB73CC38E258F9E8D Associated with TarantulaStrike ransomware
sha1 8e2a3ef5cb4e523562552a832593b1825754ff43 Associated with TarantulaStrike ransomware
sha1 8185544283a8755863ac9533f57187cc61752a1a Associated with TarantulaStrike ransomware
ip 185.44.126.143 C2 server IP - TarantulaStrike campaign

No ransom notes