Month: October 2022

Malware Analysis – dcrat – 9c9891d87460cd4e2074c0e21998ef52

October 7, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:517, botnet:884d084df0d90657bc52b99e12a5611c, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – blackbasta – 6d5b9675b68bac95b885b4bb294134a1

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, evasion, ransomwareMD5: 6d5b9675b68bac95b885b4bb294134a1SHA1: 74dbf463be3139a28d9851b3b80c2ecac3e56304ANALYSIS DATE: 2022-10-07T03:40:04ZTTPS: T1490, T1491, T1112, T1082, T1107 ScoreMeaningExample10Known badA malware family...

Malware Analysis – smokeloader – 9c9891d87460cd4e2074c0e21998ef52

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9c9891d87460cd4e2074c0e21998ef52SHA1: e51b3200b7967890d25fb00b00b730f373dce7ffANALYSIS DATE: 2022-10-07T03:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – fbd7e50091e64349827d1a62947ce042

October 7, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: fbd7e50091e64349827d1a62947ce042SHA1: 22db7cddf60c5eadeedafc4ce7f27530a06899f4ANALYSIS DATE: 2022-10-07T03:40:04ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – blackbasta – 6d5b9675b68bac95b885b4bb294134a1

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, evasion, ransomwareMD5: 6d5b9675b68bac95b885b4bb294134a1SHA1: 74dbf463be3139a28d9851b3b80c2ecac3e56304ANALYSIS DATE: 2022-10-07T03:42:04ZTTPS: T1490, T1082, T1012, T1107, T1491, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, persistence, ransomwareMD5: c115bbbdb1a61f8c553d74802bfd78fbSHA1: 1f439569e3c1c14ea9f02235f8f45c49e2764160ANALYSIS DATE: 2022-10-07T03:45:26ZTTPS: T1012, T1082, T1060, T1112, T1107, T1490, T1491 ScoreMeaningExample10Known badA...

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: c115bbbdb1a61f8c553d74802bfd78fbSHA1: 1f439569e3c1c14ea9f02235f8f45c49e2764160ANALYSIS DATE: 2022-10-07T03:42:52ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: c115bbbdb1a61f8c553d74802bfd78fbSHA1: 1f439569e3c1c14ea9f02235f8f45c49e2764160ANALYSIS DATE: 2022-10-07T03:40:04ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 14309ebba0bb552a9bbbf640301313ed

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 14309ebba0bb552a9bbbf640301313edSHA1: 104e44044325cc19415232de78e0146e45ef17c4ANALYSIS DATE: 2022-10-07T04:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dcrat – 14309ebba0bb552a9bbbf640301313ed

October 7, 2022

Malware Analysis – djvu – dfcb8ba262be97d0c87031c6c8cd4abb

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dfcb8ba262be97d0c87031c6c8cd4abbSHA1: fca9b0f065baced918451eaabf4779505ea81bd3ANALYSIS DATE: 2022-10-07T04:20:55ZTTPS: T1053, T1012, T1082, T1060,...

Malware Analysis – djvu – 6747e6c476e9a424f200ab855a7e608a

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6747e6c476e9a424f200ab855a7e608aSHA1: e3a8b85e2ef091416bbf72f9384257bb6fc97653ANALYSIS DATE: 2022-10-07T04:38:59ZTTPS: T1053, T1005, T1081, T1012,...

Parrot 5.1 – Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

October 7, 2022

Parrot OS 5.1 is officially released. We're proud to say that the new version of Parrot OS 5.1 is available...

Malware Analysis – djvu – 5ec6d8582f6ab8401fe667bc22ed639f

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5ec6d8582f6ab8401fe667bc22ed639fSHA1: f51d073d99e98f0b23595738b927775fd72e9116ANALYSIS DATE: 2022-10-06T20:00:19ZTTPS: T1053, T1005, T1081, T1222,...

Malware Analysis – djvu – a64d49b747d1ae2346f8c4e47f75d990

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a64d49b747d1ae2346f8c4e47f75d990SHA1: 1a127cbb2996ab256afeda3773571b90f61b1c2aANALYSIS DATE: 2022-10-06T20:01:45ZTTPS:...

Cobalt Stike Beacon Detected – 39[.]108[.]111[.]72:8081

October 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]223[.]96[.]251:80

October 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 175[.]24[.]230[.]165:443

October 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 49143739704f7d2cb081f787241a5e6b

October 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 49143739704f7d2cb081f787241a5e6bSHA1: a7ca5e122c496ec9d605cca95ba93f5fabae4c44ANALYSIS DATE: 2022-10-06T20:11:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 2af5fb4795f72a7e4d2d482f3de56203

October 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 2af5fb4795f72a7e4d2d482f3de56203SHA1: 3bd374109ebcd348321b351edd53bac2e3b809bfANALYSIS DATE: 2022-10-06T20:11:05ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a64d49b747d1ae2346f8c4e47f75d990SHA1: 1a127cbb2996ab256afeda3773571b90f61b1c2aANALYSIS DATE: 2022-10-06T20:02:29ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a64d49b747d1ae2346f8c4e47f75d990SHA1: 1a127cbb2996ab256afeda3773571b90f61b1c2aANALYSIS DATE: 2022-10-06T20:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 143[.]198[.]116[.]67:443

October 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]135[.]70[.]137:80

October 7, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Month: October 2022

Malware Analysis – dcrat – 9c9891d87460cd4e2074c0e21998ef52

Malware Analysis – blackbasta – 6d5b9675b68bac95b885b4bb294134a1

Malware Analysis – smokeloader – 9c9891d87460cd4e2074c0e21998ef52

Malware Analysis – chaos – fbd7e50091e64349827d1a62947ce042

Malware Analysis – blackbasta – 6d5b9675b68bac95b885b4bb294134a1

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

Malware Analysis – smokeloader – 14309ebba0bb552a9bbbf640301313ed

Malware Analysis – dcrat – 14309ebba0bb552a9bbbf640301313ed

Malware Analysis – djvu – dfcb8ba262be97d0c87031c6c8cd4abb

Malware Analysis – djvu – 6747e6c476e9a424f200ab855a7e608a

Parrot 5.1 – Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

Malware Analysis – djvu – 5ec6d8582f6ab8401fe667bc22ed639f

Malware Analysis – djvu – a64d49b747d1ae2346f8c4e47f75d990

Cobalt Stike Beacon Detected – 39[.]108[.]111[.]72:8081

Cobalt Stike Beacon Detected – 124[.]223[.]96[.]251:80

Cobalt Stike Beacon Detected – 175[.]24[.]230[.]165:443

Malware Analysis – ransomware – 49143739704f7d2cb081f787241a5e6b

Malware Analysis – ransomware – 2af5fb4795f72a7e4d2d482f3de56203

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

Cobalt Stike Beacon Detected – 143[.]198[.]116[.]67:443

Cobalt Stike Beacon Detected – 43[.]135[.]70[.]137:80

[BIANLIAN] – Ransomware Victim: TWRU CPAs & Financial Advisors

[RANSOMHUB] – Ransomware Victim: OfficeZilla[.]com

[KILLSEC] – Ransomware Victim: waltersgardens[.]com

[KAIROS] – Ransomware Victim: tacomaengineers[.]com

[SPACEBEARS] – Ransomware Victim: CNHW Landscape Design, Ltd

You may have missed