Moneybird (9bffdaff-a9dc-59fa-9899-9d987fa190dd)
Moneybird is a ransomware variant written in C++ associated with Agrius operations. The name "Moneybird" is contained in the malware's ransom note and as strings in the executable.[CheckPoint Agrius 2023]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level | 
|---|---|---|---|---|
| Agrius (36c70cf2-c7d5-5926-8155-5d3a63e3e55a) | Tidal Groups | Moneybird (9bffdaff-a9dc-59fa-9899-9d987fa190dd) | Tidal Software | 1 |