BERT Ransomware IOC - Payload Download and Hash Match

Funda Denoya Yendra Putra@ins3cto

•updated Jul 8, 2025•1•2•22

Detects execution or download of known BERT Ransomware payload hosted at http://185.100.157.74/payload.exe or matching known hash indicators.