IOC pivotioc · sha-256
75B525B220169F07AECFB3B1991702FBD9A1E170CAF0040D1FCB07C3E819F54A
?? · UnknownPlayconfidence · high
SHA-256 of the GRIXBA information-stealer / custom data gathering tool used by Play ransomware affiliates, published in the June 2025 update to CISA/FBI/ACSC advisory AA23-352A.
- family
- Grixba
- first seen
- Jun 3, 2025
- publisher
- CISA