IOC pivotioc · md5
5986ab04dd6b3d259935249741d3eff2
IR · IranHandalaconfidence · high
Handala Wiper executable ('handala.exe') MD5 published in Check Point Research's 2026 'Handala Hack - Unveiling Group's Modus Operandi' follow-up to the May 2024 'Bad Karma, No Justice' report. CPR explicitly attributes the Handala persona to Void Manticore (aka Red Sandstorm / Banished Kitten), affiliated with Iran's MOIS Counter-Terrorism Division.
- family
- Handala Wiper
- first seen
- Mar 31, 2024
- publisher
- Check Point Research