Parsing: enabled
Description
Gunra is an emerging ransomware group first identified in April 2025. It employs a classic double-extortion model—encrypting sensitive data and exfiltrating it for publication via a Tor-hosted leak site. Since its emergence, Gunra has struck a diverse set of global targets—reportedly spanning sectors like manufacturing, healthcare, IT, real estate, agriculture, and consulting in countries including Brazil, Japan, Canada, Turkey, South Korea, Taiwan, Egypt, and the U.S.
External Analysis5
| External Analysis |
|---|
| https://www.trendmicro.com/en_us/research/25/g/gunra-ransomware-linux-variant.html |
| https://www.darkreading.com/threat-intelligence/nimble-gunra-ransomware-linux-variant |
| https://industrialcyber.co/ransomware/cyfirma-warns-of-gunra-ransomware-surge-targeting-critical-infrastructure-using-double-extortion |
| https://watchguard.com/wgrd-security-hub/ransomware-tracker/gunra |
| https://theravenfile.com/2025/09/23/gunra-ransomware-what-you-dont-know/ |
Ransom notes2
- R3ADM3_2.txt txt
- R3ADM3.txt txt
Mail1
| a00f105546345756@proton.me |
Tox2
| Tox |
|---|
| 2507312EC10BB44ED9DAA04E3C5C27E8C13154649B1A02E73ACFAE1681EE0208D05133A8FB22 |
| 47829AF1C943D4C296C910706923A5199BDA4995B076ED9A9016F7DEF161D445DF00F13E6900 |
Urls6
| Url | ||||
|---|---|---|---|---|
| http://gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad.onion/ | Down |
|
||
| http://tgsst34i6z4mwdj2kpigixxb3k3xfz7xhuqnsowvfvyu3snm6nv4s5ad.onion/ | Down |
|
||
| http://myeli53ogsryjg2kob4xqxtwkr5oc5zj7jr5fcfizpytwe566k5thxyd.onion/ | Down |
|
||
| http://6oeuvb4fq65xlrft2ezxjmkeqnu7oafbsevrr3ocer27wft6ivvhstqd.onion/ | Down |
|
||
| http://ryrw2ojab62yij4y33ssfgvm2d2vwt3tcqetu6qmpwznqhooqxz3wpqd.onion/ | Down |
|
||
| http://lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd.onion | Up |
|
Chat servers5
| Url | ||||
|---|---|---|---|---|
| http://2bw7r32r5eshwk2h7uekj3lwzorxds2jyhyzqyilphid3r27x5hsf4yd.onion | Down |
|
||
| http://jzbhtsuwysslrzi2n5is3gmzsyh6ayhm7jt3xowldhk7rej4dqqubxqd.onion/ | Down |
|
||
| http://vrlgjxbl6yroq26xkcjpafgmmxrlpawvr4agppna6apfxjxav2mq66ad.onion | Down | |||
| http://nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd.onion | Down |
|
||
| http://raas.lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd.onion | Up |
|
Admin servers1
| Url | ||||
|---|---|---|---|---|
| http://nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd.onion/ | Down |
|
Activity (interactive) 37
Posts37
| Date | Title | Description | Screen |
|---|---|---|---|
| KUKJE PHARM CO.,LTD |
|
||
| Frontier Financial Group |
|
||
| El Ezh Building Contracting LLC |
|
||
| Thai Petroleum & Trading Co., Ltd. |
|
||
| Grupo PyD |
|
||
| Ipiranga Contábil |
|
||
| NeoDerm |
|
||
| INCARFE S.L. |
|
||
| Eric Davis Dental |
|
||
| Ventilaciones Nerual, S.L. |
|
||
| Envy Recycling |
|
||
| VINTAGE HOMESTEAD GmbHy |
|
||
| Diamond |
|
||
| ASPShips |
|
||
| triotech.com.sg |
|
||
| bkksky.com |
|
||
| INHA University | 650GB internal main database | INHA University | 650GB internal main database |
|
|
| miraense.com | 8TB internal documents, 2TB billing database | miraense.com | 8TB internal documents, 2TB billing database |
|
|
| hwacheon | 265GB Financial Documents (will add more|not fully published yet) | hwacheon | 265GB Financial Documents (will add more|not fully published yet) |
.png)
|
|
| Samwha Capacitor Group | 114GB Financial Documents | Samwha Capacitor Group | 114GB Financial Documents |
|
|
| SEGUROS AMÉRICA | SEGUROS AMÉRICA |
|
|
| Seoul Guarantee Insurance | 13.2T pure compressed oracle database | Seoul Guarantee Insurance | 13.2T pure compressed oracle database |
|
|
| SEGUROS AMÉRICA | 1 Million customer data | SEGUROS AMÉRICA | 1 Million customer data |
|
|
| American Hospital Dubai | 40TB | Industry: Health Care | Location: Dubai, UAE | https://www.ahdubai.com |
|
|
| Justicia Penal Militar | 45TB | Industry: Gobierno | Location: Colombia | http://www.justiciamilitar.gov.co/home |
|
|
| ACCS Le Groupe | Industry: Building automation, systems integration, and energy optimization for smart buildings |
|
|
| American Hospital Dubai | Industry: Healthcare Service |
|
|
| Olho D'Água Distribuidora | Industry: Water distribution and tanker truck services |
|
|
| Anjos Ramos | Industry: Advocacy / Law Firm |
|
|
| Adria Grupa | Industry: Facilities Management & Commercial Cleaning, Business Services |
|
|
| Grupo Jorge Batista | Industry: E-Commerce |
|
|
| TOMOKU CO., LTD. | Industry: Paper/Soft Products |
|
|
| Bioprofarma Bagó S.A | Industry: Pharmaceuticals |
|
|
| KLINGER Italy | Industry: Level Gauges, valves and industrial gaskets |
|
|
| Varela Hermanos | Industry: Beverage Manufacturing Location: Panama Publish Date: Expired URL: varelahermanos.com | ||
| Dar Al Teb | Industry: Hospital & Healthcare Location: Egypt Publish Date: Expired URL: daralteb.com | ||
| Shinko Shoji | Industry: Real Estate Location: Japan Publish Date: Expired URL: www.shinkocorp.co.jp |