BushidoUK ToolMatrix GroupProfiles: Yurei

Fecha
18 Jun 2026
Actor
bushidouk
Tipo
Report
Pais
United States
Sector
Defense
Confianza
high
60
Prioridad analitica
Media

Basado en actor, pais, IOCs, TTPs, filtracion y calidad de contexto.

2IOCs
0TTPs
bushidoukActor
United StatesPais
Executive Summary
Recurso del BushidoUK Ransomware Tool Matrix - GroupProfiles.

Key Points

  • Source: GroupProfiles/Yurei.md
  • BushidoUK Tool Matrix

GroupProfiles: Yurei.md

Recurso del BushidoUK Ransomware Tool Matrix - GroupProfiles.

Yurei's Tools

| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |

|----------------------|-----------|-----------------|------------------|--------|------------|--------|--------------|

| Everything.exe | AnyDesk | | | Invoke-TheHash | | PsExec | |

| SoftPerfect NetScan | | | | winPEAS | | SDelete | |

| | | | | NetExec | | | |

| | | | | Rubeus | | | |

> [!NOTE]

> This is the list of tools that have been observed during various intrusions that lead to Beast ransomware deployment.

#### Sources

| Date Published | Report |

|----------------|---------------|

| 1 April 2026 | https://www.team-cymru.com/post/yurei-double-extortion-ransomware-campaign-toolkit |

Referencias

Diamond Model

Adversary
bushidouk
Ver perfil →
Victim
BushidoUK ToolMatrix GroupProfiles: Yurei
United States
Capability
Report
Infrastructure
www.team-cymru.com

Relations

Mapa de nodos relacionados por IOCs compartidos, actor, enlaces IntelTracker/OSINT, campanas y victimas observadas. Haz click en un nodo para abrir el post, filtro o fuente.

17 enlaces

Indicadores de Compromiso (IOCs)

TipoValorContextoOSINT
File Everything.exe Artefacto observado VT OffSec SOCRadar
Domain www.team-cymru.com Extraido del contenido VT OffSec SOCRadar

Referencias y enlaces

→ Perfil del actor bushidouk en el blog → Ver bushidouk en IntelTracker → Fuente OSINT: github.com→ Fuente OSINT: github.com → Buscar bushidouk en APTTrail → Repositorio APTTrail → Mas incidentes en United States → Buscar en Google News → Analizar en VirusTotal → Feed RSS del blog
← Volver al panel de inteligencia

Incidentes recientes