Month: October 2022

Malware Analysis – ransomware – f37c9a773215e49e5ebe4cd392a8342f

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f37c9a773215e49e5ebe4cd392a8342fSHA1: bdbe8291891304bf2ea5a0da0e222e135d9f7f9bANALYSIS DATE: 2022-10-23T04:20:28ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – fd0957803f2f5d823c11685c8a3a9e73

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fd0957803f2f5d823c11685c8a3a9e73SHA1: 80d9a955709cd5f45df3d3b0450c0152e393a25eANALYSIS DATE: 2022-10-23T04:20:32ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – deffa172bc01d471e42789864668d103

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: deffa172bc01d471e42789864668d103SHA1: f7cdab17ce2b1a5b6f8cc103f5f0d47eae2f2dcbANALYSIS DATE: 2022-10-23T04:10:05ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – persistence – 1fae0187a453b236b50ec4cb0b79bea0

October 23, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 1fae0187a453b236b50ec4cb0b79bea0SHA1: 102d3e24bab008c89b558b02b639c61cb040f40fANALYSIS DATE: 2022-10-23T04:20:24ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – ransomware – d278a12d260a48cb9ea30d45b58cbeed

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d278a12d260a48cb9ea30d45b58cbeedSHA1: eec6305462c6f946e44ad1cbcc72a7481c76a616ANALYSIS DATE: 2022-10-23T04:20:37ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 8f4b9aca8df15a22d5ad0ba4ea1488cc

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8f4b9aca8df15a22d5ad0ba4ea1488ccSHA1: 1c6d6ffaa726980f645d7f89bf84f6f9c2715fe5ANALYSIS DATE: 2022-10-23T04:20:41ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 1ff351a9c2dc8e54b71b3e7b00b1c54a

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 1ff351a9c2dc8e54b71b3e7b00b1c54aSHA1: 2e57d05585eaff7d3eb4f2eb229c433e86695fdeANALYSIS DATE: 2022-10-23T04:20:46ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – – 42ff22493f094600f2daa6a2984861a3

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 42ff22493f094600f2daa6a2984861a3SHA1: f992b95f7330bcd6416df64b24267cf979b7a151ANALYSIS DATE: 2022-10-23T04:20:57ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 0841781ce334fa545cf5ced3df6b019d

October 23, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0841781ce334fa545cf5ced3df6b019dSHA1: 60089d8fe3993084aef5b6100bc4019675543294ANALYSIS DATE: 2022-10-23T04:41:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 211ffba6d8fe29258dd740dbe6c19e08

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 211ffba6d8fe29258dd740dbe6c19e08SHA1: 525c901952fde8683850484524d252418e700e31ANALYSIS DATE: 2022-10-23T04:39:19ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – – 8db6d3fbe634d9fcf41f15400d1f343c

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 8db6d3fbe634d9fcf41f15400d1f343cSHA1: bd3b9ca039850d187da1642121362ab743cf4f57ANALYSIS DATE: 2022-10-23T04:42:24ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – locky – 070dddf9d7c0afae4a8c5419e910d4e9

October 23, 2022

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, ransomwareMD5: 070dddf9d7c0afae4a8c5419e910d4e9SHA1: c5382329524a6f84ac08990634d311f2e1e90279ANALYSIS DATE: 2022-10-23T04:37:34ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – discovery – 54639aa125db4aebe41299332989f3a0

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, upxMD5: 54639aa125db4aebe41299332989f3a0SHA1: 068acdc404596d7941cf3ab35b90c1fff813913eANALYSIS DATE: 2022-10-21T17:29:44ZTTPS: T1082, T1012, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – adware – 5bb9e6b6ee66206e848b5ae8e13a6050

October 23, 2022

Score: 9 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 5bb9e6b6ee66206e848b5ae8e13a6050SHA1: 0a43f6178692e21e40b248e5b3900b16ba844015ANALYSIS DATE: 2022-10-21T17:57:31ZTTPS: T1060, T1112, T1222, T1012, T1120, T1082,...

Malware Analysis – discovery – 13db9c3f1244dc2bdd0dca16dae87466

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 13db9c3f1244dc2bdd0dca16dae87466SHA1: 814564b8906a83139f1d8b987e75fd2bf7209f28ANALYSIS DATE: 2022-10-21T18:40:44ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 27bbd42246a1822d33d2483c915cd660

October 23, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 27bbd42246a1822d33d2483c915cd660SHA1: f4e1809dfd77ee7e5867de325f7ae3c334f4a394ANALYSIS DATE: 2022-10-21T18:26:21ZTTPS: T1082, T1060, T1112, T1004, T1158, T1088,...

Malware Analysis – discovery – 10ee7cce9524e4d2720a32f8fea16010

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 10ee7cce9524e4d2720a32f8fea16010SHA1: d7e89b4db2324da4dec5d020946c2eb92484f4baANALYSIS DATE: 2022-10-21T17:47:15ZTTPS: T1222, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]248:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 194[.]195[.]213[.]31:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]243:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 42c6a6b16d75378eab14240084ae16f0

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 42c6a6b16d75378eab14240084ae16f0SHA1: 83031b984c12a0cb50d7882a450fe3fa85adc16fANALYSIS DATE: 2022-10-21T18:43:48ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 27c0ae51af391cf5d411e6aa790a7660

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 27c0ae51af391cf5d411e6aa790a7660SHA1: 07c2bdca3cebcb1725a76260a151f986ae3b5bb8ANALYSIS DATE: 2022-10-21T18:54:28ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 166a8cec83c5e620cfe57290754a14b6

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 166a8cec83c5e620cfe57290754a14b6SHA1: 302ad1ed3a3518db09a36e0093b9cd188d819874ANALYSIS DATE: 2022-10-21T19:07:27ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – cryptolocker – 5a4add9136f4bab32c9576ea03133c3e

October 23, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: 5a4add9136f4bab32c9576ea03133c3eSHA1: c72534ef23599b2801da50e2e7e5206c8c57ab1eANALYSIS DATE: 2022-10-21T18:47:47ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Month: October 2022

Malware Analysis – ransomware – f37c9a773215e49e5ebe4cd392a8342f

Malware Analysis – ransomware – fd0957803f2f5d823c11685c8a3a9e73

Malware Analysis – djvu – deffa172bc01d471e42789864668d103

Malware Analysis – persistence – 1fae0187a453b236b50ec4cb0b79bea0

Malware Analysis – ransomware – d278a12d260a48cb9ea30d45b58cbeed

Malware Analysis – ransomware – 8f4b9aca8df15a22d5ad0ba4ea1488cc

Malware Analysis – ransomware – 1ff351a9c2dc8e54b71b3e7b00b1c54a

Malware Analysis – – 42ff22493f094600f2daa6a2984861a3

Malware Analysis – ransomware – 0841781ce334fa545cf5ced3df6b019d

Malware Analysis – djvu – 211ffba6d8fe29258dd740dbe6c19e08

Malware Analysis – – 8db6d3fbe634d9fcf41f15400d1f343c

Malware Analysis – locky – 070dddf9d7c0afae4a8c5419e910d4e9

Malware Analysis – discovery – 54639aa125db4aebe41299332989f3a0

Malware Analysis – adware – 5bb9e6b6ee66206e848b5ae8e13a6050

Malware Analysis – discovery – 13db9c3f1244dc2bdd0dca16dae87466

Malware Analysis – evasion – 27bbd42246a1822d33d2483c915cd660

Malware Analysis – discovery – 10ee7cce9524e4d2720a32f8fea16010

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]248:80

Cobalt Stike Beacon Detected – 194[.]195[.]213[.]31:80

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]243:443

Malware Analysis – ransomware – 42c6a6b16d75378eab14240084ae16f0

Malware Analysis – discovery – 27c0ae51af391cf5d411e6aa790a7660

Malware Analysis – discovery – 166a8cec83c5e620cfe57290754a14b6

Malware Analysis – cryptolocker – 5a4add9136f4bab32c9576ea03133c3e

[APT73] – Ransomware Victim: gureco[.]pl

[APT73] – Ransomware Victim: lgpunjab[.]gov[.]in

[INCRANSOM] – Ransomware Victim: IPE Engwicht

[HUNTERS] – Ransomware Victim: Aeris Energy

[HUNTERS] – Ransomware Victim: Jones & Mayer

You may have missed