Month: October 2022

Malware Analysis – djvu – b71c28a6e77add43758eda3512216036

October 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – evasion – 207e6f51489a897991888a38efa3acd6

October 27, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealerMD5: 207e6f51489a897991888a38efa3acd6SHA1: 1fb9b8115d74cf38d6a90b9049c73ea6eb743643ANALYSIS DATE: 2022-10-26T20:22:48ZTTPS: T1059, T1107, T1490, T1005, T1081, T1491, T1112,...

Malware Analysis – – f9eeabbdcd2b69c5955d4eb2c59ba017

October 27, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: f9eeabbdcd2b69c5955d4eb2c59ba017SHA1: 698ccfd708451b56bc2007af6037208c06cad3eeANALYSIS DATE: 2022-10-26T20:07:40ZTTPS: T1053 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – wannacry – 5dbe26f60dc72ad662285665618fcf7e

October 27, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 5dbe26f60dc72ad662285665618fcf7eSHA1: 1100ca6718c317568e3e86a545a7167af863f469ANALYSIS DATE: 2022-10-26T20:20:22ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – f5e72bf445387eddec000e0238adf873

October 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealerMD5: f5e72bf445387eddec000e0238adf873SHA1: 895eb3047e7a28ce219fdd7e7ad5ce2a61312d93ANALYSIS DATE: 2022-10-26T20:22:20ZTTPS: T1059, T1107, T1490, T1060, T1112, T1012, T1120,...

Malware Analysis – smokeloader – 61878d186ed8e369f6122847aac6927c

October 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 61878d186ed8e369f6122847aac6927cSHA1: 011cbc8c2b04e0fe73d9cfa06869099b0ccc1d9eANALYSIS DATE: 2022-10-26T21:46:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – f685cd39636a0862009737be04556cce

October 27, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: f685cd39636a0862009737be04556cceSHA1: 886aeae78c659952c0862d323da361c28761d711ANALYSIS DATE: 2022-10-26T22:13:49ZTTPS: T1012, T1082, T1057 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – e2877d46f4d7f96d20ae5913afff60ae

October 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e2877d46f4d7f96d20ae5913afff60aeSHA1: 66746e6642dcd7a910466e141b3e869c9c9be362ANALYSIS DATE: 2022-10-26T20:59:47ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 9cb5b0bec4a9172fe2299ebb0cc2be86

October 27, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 9cb5b0bec4a9172fe2299ebb0cc2be86SHA1: 8f5691556fbac1a36b99796b9d4e1683781c15a6ANALYSIS DATE: 2022-10-26T20:57:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 198[.]44[.]140[.]97:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]62:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]232[.]146:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]190[.]72:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – cryptolocker – bc11c93f1b6dc74bf4804a35b34d9267

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: bc11c93f1b6dc74bf4804a35b34d9267SHA1: a18c25ed1282f56225d21c6460ffaaf16ae0d965ANALYSIS DATE: 2022-10-26T22:28:39ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – cryptolocker – fec5a0d4dea87955c124f2eaa1f759f5

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: fec5a0d4dea87955c124f2eaa1f759f5SHA1: ea2e50e16448ac8131391e5322663660ef0a5632ANALYSIS DATE: 2022-10-26T22:28:35ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 61386a35e3e0f1d1cc0b70d571cfb26e

October 27, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 61386a35e3e0f1d1cc0b70d571cfb26eSHA1: 6433c046bf0ad139e43199f58c5115538d3ff66bANALYSIS DATE: 2022-10-26T22:28:38ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – cryptolocker – 354f7ec15741db7fcdfe7b158c14dfaa

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: 354f7ec15741db7fcdfe7b158c14dfaaSHA1: 1265f62cb1bf781baaf5161e8b2fcd40a4026747ANALYSIS DATE: 2022-10-26T22:28:37ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 167[.]99[.]116[.]140:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 195[.]14[.]122[.]172:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]27:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]221[.]127[.]219:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – cryptolocker – 7f3cc059ffc6c11fe42695e5f19553ab

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: 7f3cc059ffc6c11fe42695e5f19553abSHA1: f22555d2898e3486b2c628a2e523657f5fbbe475ANALYSIS DATE: 2022-10-26T22:28:41ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – cryptolocker – ffeae4a391a1d5203bd04b4161557227

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: ffeae4a391a1d5203bd04b4161557227SHA1: 7c7013dd8def75c94828b40ffa139b6d89ec4683ANALYSIS DATE: 2022-10-26T22:28:41ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – 9c7e4e17df4b373ef137d1611e0f902c

October 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojan, upxMD5: 9c7e4e17df4b373ef137d1611e0f902cSHA1: 84392abdf2f3fd70aac778d6c248786514de64caANALYSIS DATE: 2022-10-26T22:28:58ZTTPS: T1082, T1060, T1112, T1089, T1004, T1088,...

Month: October 2022

Malware Analysis – djvu – b71c28a6e77add43758eda3512216036

Malware Analysis – evasion – 207e6f51489a897991888a38efa3acd6

Malware Analysis – – f9eeabbdcd2b69c5955d4eb2c59ba017

Malware Analysis – wannacry – 5dbe26f60dc72ad662285665618fcf7e

Malware Analysis – evasion – f5e72bf445387eddec000e0238adf873

Malware Analysis – smokeloader – 61878d186ed8e369f6122847aac6927c

Malware Analysis – discovery – f685cd39636a0862009737be04556cce

Malware Analysis – smokeloader – e2877d46f4d7f96d20ae5913afff60ae

Malware Analysis – – 9cb5b0bec4a9172fe2299ebb0cc2be86

Cobalt Stike Beacon Detected – 198[.]44[.]140[.]97:443

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]62:443

Cobalt Stike Beacon Detected – 81[.]68[.]232[.]146:80

Cobalt Stike Beacon Detected – 84[.]32[.]190[.]72:443

Malware Analysis – cryptolocker – bc11c93f1b6dc74bf4804a35b34d9267

Malware Analysis – cryptolocker – fec5a0d4dea87955c124f2eaa1f759f5

Malware Analysis – ransomware – 61386a35e3e0f1d1cc0b70d571cfb26e

Malware Analysis – cryptolocker – 354f7ec15741db7fcdfe7b158c14dfaa

Cobalt Stike Beacon Detected – 167[.]99[.]116[.]140:80

Cobalt Stike Beacon Detected – 195[.]14[.]122[.]172:443

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]27:80

Cobalt Stike Beacon Detected – 124[.]221[.]127[.]219:80

Malware Analysis – cryptolocker – 7f3cc059ffc6c11fe42695e5f19553ab

Malware Analysis – cryptolocker – ffeae4a391a1d5203bd04b4161557227

Malware Analysis – evasion – 9c7e4e17df4b373ef137d1611e0f902c

[LOCKBIT3] – Ransomware Victim: 9fsfalcons[.]org

[HUNTERS] – Ransomware Victim: SmartLynx Airlines SIA

[APT73] – Ransomware Victim: linebank[.]co[.]id

[CACTUS] – Ransomware Victim: galatachemicals[.]com

[FUNKSEC] – Ransomware Victim: kfar-yona[.]muni[.]il

You may have missed