Forensia CTI Core

Profile

GCMAN is a threat group that focuses on targeting banks for the purpose of transferring money to e-currency services.

Techniques

2 ATT&CK techniques attributed to this actor.

Related corpus activity

135 indicators EXHIBIT techniques this actor uses. This is a shared-technique signal, not a first-party attribution to GCMAN.

Indicator	Type	Family	Sev	Src
cve-2025-34054	cve	—	85	4
cve-2025-0921	cve	—	85	2
cve-2025-66478	cve	—	85	2
cve-2021-27137	cve	—	85	8
cve-2016-15047	cve	—	85	4
cve-2026-22584	cve	—	85	2
cve-2025-23304	cve	—	85	2
e952c18272efa1c3d73d0a5381bcf443c02743fe	hash	—	80	3
cf127d66124c390ca0f0b42c6385c3c8	hash	cryptojacking	80	1
f8d93c1769e877aae7e7d5c289a467b5ae371c7a	hash	—	80	3
f4d77958a12a0778283d3e679b24b18f82e332c4	hash	—	80	3
ebcf977806f68af3147e0b78b55f6aed	hash	—	80	2
e22d1b625ee309b60caf0252c5df7656	hash	cryptojacking	80	1
9c44bc9373377831c45dd0ac2661a28e	hash	—	80	3
681075027553546c119ec447eb8df84633dcffce	hash	—	80	3
123e80a34508c4dede7cc70e76931fcc	hash	—	80	3
b1b7aaa5bd4408a4d3003a9fabcdd041	hash	—	80	3
84ad78b2bab946c3677fdc28ebd8a774	hash	—	80	3
873f1277a42de5c82f869459e7fb7c94554a642b	hash	—	80	3
625b6535321d58bb5c613e85332bf731	hash	—	80	3
b439749a581ac5a29b5c9d91fc092bf4ceaa76a4	hash	—	80	3
eead44c0af7ddb12cece1a6125cf213bab3c22511cd59aff9d63dcfddb7d4386	hash	—	80	4
b82936f37648518425c7d3cf9e09eaffa41d7cdb3840f6a40287e3a108880f7b	sha256	—	80	2
b8eed63ab9cbdca494f26a6f66bfd4a0a693b3f0	hash	—	80	3
2654c08491a0f7c4a3dfc6282de5638b	hash	—	80	3
cc19e502e4201cc974c753b96429027925224f53	hash	—	80	2
01e3dce00ea45829bd9f6a583004976ac63973a0	hash	cryptojacking	80	1
00e195d94d3b1f7092eb9ed132f89d1b	hash	—	80	3
18821dbb53892d6faa14b1f063517a0302057290	hash	cryptojacking	80	1
d0a851f0b871df60c73d2c7d3f55b031c45e4c2e	hash	cryptojacking	80	1

Showing the top 30 by severity of 135.