threatintel
actor tracker
IOC pivot
ioc · md5

5986ab04dd6b3d259935249741d3eff2

IR · IranHandalaconfidence · high

Handala Wiper executable ('handala.exe') MD5 published in Check Point Research's 2026 'Handala Hack - Unveiling Group's Modus Operandi' follow-up to the May 2024 'Bad Karma, No Justice' report. CPR explicitly attributes the Handala persona to Void Manticore (aka Red Sandstorm / Banished Kitten), affiliated with Iran's MOIS Counter-Terrorism Division.

family
Handala Wiper
first seen
Mar 31, 2024
publisher
Check Point Research
source citation