G0034 - Sandworm Team

Sandworm Team is a destructive threat group that has been attributed to Russia's General Staff Main Intelligence Directorate (GRU) Main Center for Special Technologies (GTsST) military unit 74455.This group has been active since at least 2009.

Author
agomez
Created
2023-03-03 15:52:35
Last updated
2026-02-07 18:58:07
Downloads
341367
Hostname indicators
5
Sample indicators
9

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

cpcpipe.com Hostname

modified 2026-10-17 08:40:12
Malicious URL (Hybrid-Analysis) · Electrum (Maltiverse)

cpcpipe.org Hostname

modified 2026-10-16 20:35:07
Electrum (Maltiverse)

1af2037acbabfe804a522a5c4dd5a4ce.exe Sample

modified 2026-10-07 01:53:47
Electrum (Maltiverse) · TitanStealer (MalwareBazaar Abuse.ch) · Earth Lusca (Maltiverse)

aea823d6446fbf9059391125a9b7fceb9f433b846275d28dc5f433645984a683.exe Sample

modified 2026-10-04 01:03:59
Electrum (Maltiverse) · Spyware (VM-Ray) · Injector (VM-Ray) · Earth Lusca (Maltiverse)

01e2a830989de3a870e4a2dac876487a.exe Sample

modified 2026-09-19 11:18:03
Electrum (Maltiverse) · TitanStealer (MalwareBazaar Abuse.ch) · Earth Lusca (Maltiverse)

telegram.org.security.ohsxy.com Hostname

modified 2026-09-03 02:18:43
Electrum (Maltiverse)

telegram.org.4234e8234ad0f.24o1.com Hostname

modified 2026-04-30 00:00:13
Electrum (Maltiverse)

e252a54e441ea88aafa694259386afd002153481af25a5b7b2df46d17ac53fcc Sample

modified 2025-10-22 00:10:46
Electrum (Maltiverse) · Earth Lusca (Maltiverse)

c78767cb268589c7e3519f8643c7d7bc891ee3e8f8660f9340419af278ade263.exe Sample

modified 2025-07-12 19:25:01
Electrum (Maltiverse) · Spyware (VM-Ray) · Earth Lusca (Maltiverse)

e54a6551dd6e290cbe53d9ceda9e6d2bf36c1010ee939f3192c97de6b5a2650c.exe Sample

modified 2025-02-14 02:13:11
Electrum (Maltiverse) · Spyware (VM-Ray) · Earth Lusca (Maltiverse)

ukroboronprom.com.ukr.pm Hostname

modified 2025-02-05 09:50:43
Electrum (Maltiverse)

c80656fe59bdeb3e701d1f7eeaaba2ef673368b2c4947945f598e3e84a6cb7f8 Sample

modified 2023-04-28 14:38:31
Electrum (Maltiverse)

Dark.exe Sample

modified 2023-03-03 14:34:15
Electrum (Maltiverse) · Injector (VM-Ray) · Earth Lusca (Maltiverse)

30c1f93a3d798bb18ef3439db0ada4e0059e1f6ddd5d860ec993393b31a62842 Sample

modified 2023-03-03 14:34:13
Electrum (Maltiverse) · Earth Lusca (Maltiverse)