SINOBI
Named by 2 kept items in this workspace.
Search every workspace for SINOBI. It matches the name as written, so it can find other things that share it.
The items that name it 2
Japanese-themed ransomware group referenced for comparison; DLS currently offline (ATTOW); does have a Vanity Domain Name
Mentioned as another suspected spin-off of INC Ransomware
All threat actors in this workspace.