Month: October 2022

Malware Analysis – ransomware – 274658a1801740e92a80679b5efc6480

October 28, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 274658a1801740e92a80679b5efc6480SHA1: c92aadabeb6de029e372f65a44114d018875059cANALYSIS DATE: 2022-10-28T15:41:05ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 93db49fd35d807bea37d5106e0b65feb

October 28, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 93db49fd35d807bea37d5106e0b65febSHA1: 7141f9d6b6681b55687c7fea903d7aaca25a03feANALYSIS DATE: 2022-10-28T15:41:10ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 5b8a65714fa4e7d76d0ffd6b1813e1cf

October 28, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 5b8a65714fa4e7d76d0ffd6b1813e1cfSHA1: c37582d639f51f0df2ca39ec26f539ca5134a438ANALYSIS DATE: 2022-10-28T15:41:15ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 57f0011b20c0cf3505a5dad7a5b9239b

October 28, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 57f0011b20c0cf3505a5dad7a5b9239bSHA1: a7c47c07950397327fc5df49b688876497a6e8beANALYSIS DATE: 2022-10-28T15:41:20ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

CISA

CISA: Joint CISA FBI MS-ISAC Guide on Responding to DDoS Attacks and DDoS Guidance for Federal Agencies

October 28, 2022

Joint CISA FBI MS-ISAC Guide on Responding to DDoS Attacks and DDoS Guidance for Federal Agencies CISA, the Federal Bureau...

Malware Analysis – ransomware – 1eb2a65cbd122182003b662afc31b2cc

October 28, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 1eb2a65cbd122182003b662afc31b2ccSHA1: 3bdfcaa4fe17f20c6d3f230e4295e466e7a9a622ANALYSIS DATE: 2022-10-28T15:41:25ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9d2f493c94e4f454a657e0189bf2cccb

October 28, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9d2f493c94e4f454a657e0189bf2cccbSHA1: 8951c86bab48477b5996d65602e21fa9c72bf0e2ANALYSIS DATE: 2022-10-28T16:00:35ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – d21ff6900361fbaf46e001dbea8e466f

October 28, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d21ff6900361fbaf46e001dbea8e466fSHA1: ab96c69cdd221997eda99eb524edf672baa0d821ANALYSIS DATE: 2022-10-28T16:41:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 7288b6feb4799054f90d9b6cb09b581b

October 28, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7288b6feb4799054f90d9b6cb09b581bSHA1: c563b7ef1c9ae943cc1e52a1bf449dd819e08561ANALYSIS DATE: 2022-10-28T16:40:21ZTTPS: T1082, T1107, T1490, T1053, T1060, T1112, T1005, T1081,...

Month: October 2022

Malware Analysis – ransomware – 274658a1801740e92a80679b5efc6480

Malware Analysis – ransomware – 93db49fd35d807bea37d5106e0b65feb

Malware Analysis – ransomware – 5b8a65714fa4e7d76d0ffd6b1813e1cf

Malware Analysis – ransomware – 57f0011b20c0cf3505a5dad7a5b9239b

CISA: Joint CISA FBI MS-ISAC Guide on Responding to DDoS Attacks and DDoS Guidance for Federal Agencies

Malware Analysis – ransomware – 1eb2a65cbd122182003b662afc31b2cc

Malware Analysis – ransomware – 9d2f493c94e4f454a657e0189bf2cccb

Malware Analysis – smokeloader – d21ff6900361fbaf46e001dbea8e466f

Malware Analysis – persistence – 7288b6feb4799054f90d9b6cb09b581b

Google fixes a new actively exploited Chrome zero-day, it is the seventh one this year

Sandman – NTP Based Backdoor For Red Team Engagements In Hardened Networks

Cobalt Stike Beacon Detected – 13[.]67[.]188[.]7:443

Cobalt Stike Beacon Detected – 150[.]158[.]148[.]176:60001

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]69:80

Cobalt Stike Beacon Detected – 43[.]143[.]177[.]96:8888

Cobalt Stike Beacon Detected – 44[.]200[.]149[.]244:80

Cobalt Stike Beacon Detected – 123[.]57[.]255[.]233:6666

Cobalt Stike Beacon Detected – 107[.]175[.]91[.]198:80

Cobalt Stike Beacon Detected – 152[.]89[.]196[.]231:8090

Cobalt Stike Beacon Detected – 47[.]206[.]167[.]222:80

Cobalt Stike Beacon Detected – 91[.]213[.]50[.]95:53

Cobalt Stike Beacon Detected – 42[.]192[.]170[.]47:7777

Cobalt Stike Beacon Detected – 193[.]233[.]203[.]214:80

Cobalt Stike Beacon Detected – 121[.]5[.]153[.]153:80

[LOCKBIT3] – Ransomware Victim: madison-home[.]com

[CHORT] – Ransomware Victim: sheboyganwi[.]gov

[QILIN] – Ransomware Victim: Zimmerman & Frachtman PA Law Firm

[QILIN] – Ransomware Victim: Calvert Home Mortgage Investment

[QILIN] – Ransomware Victim: LBCO Contracting LTD

You may have missed