Month: October 2022

Malware Analysis – wannacry – eea571229a25bc2f5b59dce07c361cb2

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: eea571229a25bc2f5b59dce07c361cb2SHA1: b341437a1f94d645e5628d8491f068de1a049fb9ANALYSIS DATE: 2022-10-26T08:30:43ZTTPS: T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – 5535a78a4b4a483f5eeef222c4a142f0

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: 5535a78a4b4a483f5eeef222c4a142f0SHA1: 1697a46489e50c54520aa0bfc6f3663bbce12920ANALYSIS DATE: 2022-10-26T10:00:21ZTTPS: T1082, T1005, T1081, T1491, T1112,...

Cobalt Stike Beacon Detected – 124[.]221[.]248[.]119:6666

October 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 042fd0315eccd1810935b117f8c1f80d

October 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:mario23_10, botnet:nam7, botnet:slovarik15btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – wannacry – 0e4c64bd0db07a8da4a577ce09ad2ce5

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 0e4c64bd0db07a8da4a577ce09ad2ce5SHA1: 8ace3f83841d5e7d4ffb28692378dea58edb3dc1ANALYSIS DATE: 2022-10-26T10:00:26ZTTPS: T1158, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – c0ca2ff66deb363ad5186ca42387a1ec

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: c0ca2ff66deb363ad5186ca42387a1ecSHA1: e2ea45088d801a4654c6e80ba3813a666eba3074ANALYSIS DATE: 2022-10-26T10:00:31ZTTPS: T1046, T1158, T1222 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – discovery – 223a5331677dccb0d104c4ff1932a222

October 26, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 223a5331677dccb0d104c4ff1932a222SHA1: 08875300c7bc8cdfcfb714c221404773f1c7da57ANALYSIS DATE: 2022-10-26T10:14:58ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 4aa20e139e4599ff9a50edf65716677f

October 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4aa20e139e4599ff9a50edf65716677fSHA1: 1d01c5b9b852ac3291c7c6a1e35e168d80ed239cANALYSIS DATE: 2022-10-26T10:40:20ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 6b0c04b30f34d975a34cd1b789d29db7

October 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 6b0c04b30f34d975a34cd1b789d29db7SHA1: 3198404e4f97321720829dae641e06d360d705d1ANALYSIS DATE: 2022-10-26T10:40:27ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 60d2fd5a1b013f6e6ea6a937a85aea86

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 60d2fd5a1b013f6e6ea6a937a85aea86SHA1: 75c509bf1842bb13def4137e61ec2b2e177e95deANALYSIS DATE: 2022-10-26T10:20:21ZTTPS: T1158, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 27e067421cc490a5e99e2115f0bb4277

October 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 27e067421cc490a5e99e2115f0bb4277SHA1: 162b5729e0255d3cd5f22ac454e7a57b23ff0abcANALYSIS DATE: 2022-10-26T10:40:32ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Month: October 2022

Malware Analysis – wannacry – eea571229a25bc2f5b59dce07c361cb2

Malware Analysis – wannacry – 5535a78a4b4a483f5eeef222c4a142f0

Cobalt Stike Beacon Detected – 124[.]221[.]248[.]119:6666

Malware Analysis – djvu – 042fd0315eccd1810935b117f8c1f80d

Malware Analysis – wannacry – 0e4c64bd0db07a8da4a577ce09ad2ce5

Malware Analysis – wannacry – c0ca2ff66deb363ad5186ca42387a1ec

Malware Analysis – discovery – 223a5331677dccb0d104c4ff1932a222

Malware Analysis – ransomware – 4aa20e139e4599ff9a50edf65716677f

Malware Analysis – ransomware – 6b0c04b30f34d975a34cd1b789d29db7

Malware Analysis – wannacry – 60d2fd5a1b013f6e6ea6a937a85aea86

Malware Analysis – ransomware – 27e067421cc490a5e99e2115f0bb4277

Two flaws in Cisco AnyConnect Secure Mobility client for Windows actively exploited

VMware fixes critical RCE in VMware Cloud Foundation

Daily Vulnerability Trends: Wed Oct 26 2022

Black Basta Ransomware Victim: Essick Air Products

Cobalt Stike Beacon Detected – 46[.]30[.]189[.]45:80

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]28:80

Cobalt Stike Beacon Detected – 164[.]132[.]6[.]83:443

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]27:443

Cobalt Stike Beacon Detected – 54[.]242[.]33[.]176:443

Cobalt Stike Beacon Detected – 45[.]33[.]107[.]237:81

Cobalt Stike Beacon Detected – 102[.]101[.]176[.]224:443

Cobalt Stike Beacon Detected – 188[.]241[.]240[.]133:80

Cobalt Stike Beacon Detected – 46[.]175[.]148[.]74:443

[LOCKBIT3] – Ransomware Victim: acwlaw[.]com

Cobalt Strike Beacon Detected – 47[.]236[.]53[.]118:80

Cobalt Strike Beacon Detected – 198[.]199[.]122[.]34:2087

Cobalt Strike Beacon Detected – 121[.]40[.]112[.]176:8087

Cobalt Strike Beacon Detected – 134[.]175[.]248[.]97:80

You may have missed