Cl0p Oracle EBS Exploit Hashes

Georg Lauenstein@gsec

•updated Dec 17, 2025•4•0•103

Detects files associated with the Cl0p ransomware group's exploitation of the Oracle E-Business Suite vulnerability (CVE-2025-61882).