Month: October 2022

Malware Analysis – ransomware – 85c74aec951433b76fd8479cf632975f

October 25, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 85c74aec951433b76fd8479cf632975fSHA1: ff1ae5a673630b6b93bf8978544b4e7d081901b3ANALYSIS DATE: 2022-10-24T20:00:33ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 8d1d8ea68874e740eb74826f402a96eb

October 25, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8d1d8ea68874e740eb74826f402a96ebSHA1: 7bd7e2e20a0bc7915826ee9263bcb35707080daaANALYSIS DATE: 2022-10-24T20:20:19ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 2acba7d6e7fdff0650b942d051601346

October 25, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2acba7d6e7fdff0650b942d051601346SHA1: c4bf28dc8c81c7bc1f0f2b93cec0860acb7a5ff8ANALYSIS DATE: 2022-10-24T20:12:30ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – asyncrat – 1f8d2846109b9b9fdadb28ba1492dbff

October 25, 2022

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, family:azorult, family:blackmoon, family:dcrat, family:fickerstealer, family:gh0strat, family:hawkeye, family:nanocore, family:oski, family:pony, family:purplefox, family:raccoon, family:redline, family:smokeloader, botnet:5781468cedb3a203003fdf1f12e72fe98d6f1c0f, botnet:@zhilsholi,...

Cobalt Stike Beacon Detected – 45[.]77[.]129[.]68:443

October 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 13[.]214[.]128[.]88:443

October 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 125[.]176[.]39[.]23:443

October 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]216[.]71[.]178:443

October 25, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 6b9efcae830a5ffcc656118f5f0d6297

October 25, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 6b9efcae830a5ffcc656118f5f0d6297SHA1: 5a8601f3406b4a68b7e995628e3b8f6b802c15aaANALYSIS DATE: 2022-10-24T21:40:19ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 94301ae8afdd2d4ade377521f2066ee9

October 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 94301ae8afdd2d4ade377521f2066ee9SHA1: e6c6fdcd68ffa04f6631d1869de6f8c0a0217bf3ANALYSIS DATE: 2022-10-24T21:11:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – redline – 03bf9239a1c35ef0f6f162180499167f

October 25, 2022

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, evasion, infostealer, persistence, spyware, stealer, trojanMD5: 03bf9239a1c35ef0f6f162180499167fSHA1: b1921d4747ed0ca08ecb31dda5b57079dcd6085dANALYSIS DATE: 2022-10-24T20:50:15ZTTPS: T1082, T1112, T1031, T1089,...

Malware Analysis – ransomware – fe78aa640bbfe61d0363ce43521f7fad

October 25, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fe78aa640bbfe61d0363ce43521f7fadSHA1: ccb85ef6f5f18eda9c90214c063dad81f3750285ANALYSIS DATE: 2022-10-24T21:20:20ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 36171704cde087f839b10c2465d864e1

October 25, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 36171704cde087f839b10c2465d864e1SHA1: e3baa1c3ee9aa1d5ae61187be2e20ea9cb57d538ANALYSIS DATE: 2022-10-24T21:44:47ZTTPS: T1012, T1120, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – e49d70b619a1220ebb880dc4f19f730c

October 25, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e49d70b619a1220ebb880dc4f19f730cSHA1: ef68f39b5908b8405ce55a51d6e3c599839c3cbbANALYSIS DATE: 2022-10-24T22:39:53ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – f80050268e39f91fa34ce75ec8b6cfe3

October 25, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f80050268e39f91fa34ce75ec8b6cfe3SHA1: 96c63bdc35010230b259748d6efd62abefc85e63ANALYSIS DATE: 2022-10-24T21:40:22ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – e7a56ac2f0f6f3cae173a93ac2e1d858

October 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, botnet:nam7, botnet:slovarik15btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – ransomware – 3e6df41f4e8aa4d85f0d6ca7cf9f3069

October 25, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: 3e6df41f4e8aa4d85f0d6ca7cf9f3069SHA1: 279f1cd5a405a217fc2d99f8ddcdfa3fb0198008ANALYSIS DATE: 2022-10-24T22:40:26ZTTPS: T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 984db2d337c7a1f8c7eee662382d5354

October 25, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 984db2d337c7a1f8c7eee662382d5354SHA1: 235415861f9b9be9e2413fc5c2ce8d34122a2f76ANALYSIS DATE: 2022-10-24T22:40:17ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – ffa9d1cdccb22d5a686d1273992fe504

October 25, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ffa9d1cdccb22d5a686d1273992fe504SHA1: 825392c22a939c44fc3923dea1f7c6d603b17964ANALYSIS DATE: 2022-10-24T22:40:22ZTTPS: T1005, T1081, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – wannacry – eb3501049b53a503d67cbdf07a7cbdd7

October 25, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: eb3501049b53a503d67cbdf07a7cbdd7SHA1: f7419b49f425a0c4a3c2d2f5e7f82eee0754e247ANALYSIS DATE: 2022-10-24T22:40:27ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Month: October 2022

Malware Analysis – ransomware – 85c74aec951433b76fd8479cf632975f

Malware Analysis – ransomware – 8d1d8ea68874e740eb74826f402a96eb

Malware Analysis – ransomware – 2acba7d6e7fdff0650b942d051601346

Malware Analysis – asyncrat – 1f8d2846109b9b9fdadb28ba1492dbff

Cobalt Stike Beacon Detected – 45[.]77[.]129[.]68:443

Cobalt Stike Beacon Detected – 13[.]214[.]128[.]88:443

Cobalt Stike Beacon Detected – 125[.]176[.]39[.]23:443

Cobalt Stike Beacon Detected – 185[.]216[.]71[.]178:443

Malware Analysis – ransomware – 6b9efcae830a5ffcc656118f5f0d6297

Malware Analysis – smokeloader – 94301ae8afdd2d4ade377521f2066ee9

Malware Analysis – redline – 03bf9239a1c35ef0f6f162180499167f

Malware Analysis – ransomware – fe78aa640bbfe61d0363ce43521f7fad

Malware Analysis – ransomware – 36171704cde087f839b10c2465d864e1

Malware Analysis – ransomware – e49d70b619a1220ebb880dc4f19f730c

Malware Analysis – ransomware – f80050268e39f91fa34ce75ec8b6cfe3

Malware Analysis – djvu – e7a56ac2f0f6f3cae173a93ac2e1d858

Malware Analysis – ransomware – 3e6df41f4e8aa4d85f0d6ca7cf9f3069

Malware Analysis – ransomware – 984db2d337c7a1f8c7eee662382d5354

Malware Analysis – ransomware – ffa9d1cdccb22d5a686d1273992fe504

Malware Analysis – wannacry – eb3501049b53a503d67cbdf07a7cbdd7

Apple fixed the ninth actively exploited zero-day this year

Uncovering Security Blind Spots in CNC Machines

US-CERT Bulletin (SB22-297):Vulnerability Summary for the Week of October 17, 2022

Cuba ransomware affiliate targets Ukraine, CERT-UA warns

Cobalt Strike Beacon Detected – 45[.]204[.]217[.]98:2002

Cobalt Strike Beacon Detected – 121[.]40[.]55[.]28:80

Cobalt Strike Beacon Detected – 124[.]71[.]137[.]28:443

Cobalt Strike Beacon Detected – 119[.]3[.]154[.]143:80

Cobalt Strike Beacon Detected – 112[.]124[.]60[.]149:8080

You may have missed