Forensia CTI Core

Profile

Strider is a threat group that has been active since at least 2011 and has targeted victims in Russia, China, Sweden, Belgium, Iran, and Rwanda.

MITRE ATT&CK ↗

Techniques

3 ATT&CK techniques attributed to this actor.

T1090.001 Internal Proxy T1556.002 Password Filter DLL T1564.005 Hidden File System

Software

1 malware/tools attributed to this actor.

Remsec

Related corpus activity

165 indicators EXHIBIT techniques this actor uses. This is a shared-technique signal, not a first-party attribution to Strider.

Indicator	Type	Family	Sev	Src
cve-2025-1055	cve	ransomware	85	3
cve-2023-52271	cve	ransomware	85	3
cve-2025-61155	cve	ransomware	85	3
4b8ab808442bf7cb084fddf983a558c2cd4b3ff2	hash	—	80	3
84b573305b732a8372a082c057242953	hash	—	80	3
130fdc32de36a362e65c7138b560eb8d8f6ae599	hash	—	80	3
123e80a34508c4dede7cc70e76931fcc	hash	—	80	3
fdef9e489f773319f55f92f712d1b7b5447d59a632b8f4173d1b161d3759ad92	hash	phishing	80	2
2654c08491a0f7c4a3dfc6282de5638b	hash	—	80	3
a7bd8869293212e1671df90d2d41b96d4933eb9408b1111bd830e111a91bb202	hash	phishing	80	2
625b6535321d58bb5c613e85332bf731	hash	—	80	3
b8eed63ab9cbdca494f26a6f66bfd4a0a693b3f0	hash	—	80	3
873f1277a42de5c82f869459e7fb7c94554a642b	hash	—	80	3
b42159d68ba58d7857c091b5acc59e30e50a854b15f7ce04b61ff6c11cdf0156	hash	—	80	3
9c44bc9373377831c45dd0ac2661a28e	hash	—	80	3
681075027553546c119ec447eb8df84633dcffce	hash	—	80	3
6f9fbe29f8cc2788e2bc9d631e0eea2a8e9837076837b55838005a0e654f0a9e	hash	ransomware	80	3
f4d77958a12a0778283d3e679b24b18f82e332c4	hash	—	80	3
00e195d94d3b1f7092eb9ed132f89d1b	hash	—	80	3
2064ef387ac9e51ba72b32004d99e8a0b291dbab24ed8db30f437abf1b40cb49	hash	phishing	80	2
57e26f6e3b311a1064c946b69159ee05abedf9228b2f95c65536429e7ac7fb24	hash	phishing	80	2
84ad78b2bab946c3677fdc28ebd8a774	hash	—	80	3
89f8e42c825d09a0a50e99bbf7304d7037be33ea362a57d34f87fa7981f80126	hash	phishing	80	2
b1b7aaa5bd4408a4d3003a9fabcdd041	hash	—	80	3
b439749a581ac5a29b5c9d91fc092bf4ceaa76a4	hash	—	80	3
d0da2832ae1e13a98f7ce7e33a66c1b0d9797b81f69ece134e4462ea55ac923e	hash	ransomware	80	3
e952c18272efa1c3d73d0a5381bcf443c02743fe	hash	—	80	3
f8d93c1769e877aae7e7d5c289a467b5ae371c7a	hash	—	80	3
f918535f974591ef031bd0f30a8171e3da27a6754e6426a8ba095f83195661c8	hash	ransomware	80	1
458653300b48c90a8659b9e9cadc13717bce42b6	hash	—	80	3

Showing the top 30 by severity of 165.