Month: October 2022

Malware Analysis – – ba9fc3bdca857bc4e0f9a4803c1c0dee

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ba9fc3bdca857bc4e0f9a4803c1c0deeSHA1: 605bfe3a0212da3231e0c4a74a4ac2e07bf3f6d2ANALYSIS DATE: 2022-10-22T02:14:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – cfc1dcfc561553a188e2feb6c76fd508

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: cfc1dcfc561553a188e2feb6c76fd508SHA1: bcc77b9ed189d775129471ddc439b79c0c2a17deANALYSIS DATE: 2022-10-22T02:09:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – fd84da34b45b9d0a42923e804b3d1e51

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: fd84da34b45b9d0a42923e804b3d1e51SHA1: 33f2082ecec70e4f96b8b9ff70e14f40fb8462f3ANALYSIS DATE: 2022-10-22T02:15:47ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 1cd84ea4ac040c4ff441233daf58c307

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 1cd84ea4ac040c4ff441233daf58c307SHA1: cea559e9780763a792639639a12adc419bf9f6adANALYSIS DATE: 2022-10-22T02:18:34ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – danabot – 9bfcec5239f026bcd06dc1b0e7df8852

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 9bfcec5239f026bcd06dc1b0e7df8852SHA1: 79948e48db5ae58b941a4b91eb7e8ae0596c37b2ANALYSIS...

Malware Analysis – – 8169508a44729d8207958a0b64786b82

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 8169508a44729d8207958a0b64786b82SHA1: bf9ffc56112bbde8f19bba40fcec0ee9ece36500ANALYSIS DATE: 2022-10-22T02:18:55ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – ddce5db099bab8bc56d5ac70d83842a0

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ddce5db099bab8bc56d5ac70d83842a0SHA1: 7cd97f3e7a64cf10727ffff9634b9f2f0ed69c9dANALYSIS DATE: 2022-10-22T02:20:15ZTTPS: T1082, T1107, T1490, T1031, T1562, T1489, T1012, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – danabot – fedd130906924384c948ec3fb50ae2c7

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: fedd130906924384c948ec3fb50ae2c7SHA1: bb15742412d20fad379dc4f655bdb93df9196593ANALYSIS...

Malware Analysis – – 0f3d3d2005e3f5e5dad6470513e6ff0e

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 0f3d3d2005e3f5e5dad6470513e6ff0eSHA1: f86f08d34889e9305b5dac5c0ada0b87a1918ebeANALYSIS DATE: 2022-10-22T02:21:42ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 061b3060475cf1621085f4d8b0d2a7cb

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 061b3060475cf1621085f4d8b0d2a7cbSHA1: 257e65d78d69ec014f99ed93f2bbb56e96bf4a18ANALYSIS DATE: 2022-10-22T03:00:21ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – ransomware – 0ecb8b40f5fa991542fea3dd38f9f6af

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0ecb8b40f5fa991542fea3dd38f9f6afSHA1: 4c630bfc8fd146031410ebeab705b6128f740f69ANALYSIS DATE: 2022-10-22T03:00:44ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 8eedd3511eefee9608177fbe23df5e15

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8eedd3511eefee9608177fbe23df5e15SHA1: 2730d751393d6b16369b57adb3d7543566725a1bANALYSIS DATE: 2022-10-22T03:00:37ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 92d139263cdfea096dfa88b762cad95f

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 92d139263cdfea096dfa88b762cad95fSHA1: b3f79990262f99862492d42c80504106cd6d3847ANALYSIS DATE: 2022-10-22T03:00:33ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – b44246c1a4dec2da88d25828f4a3c568

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b44246c1a4dec2da88d25828f4a3c568SHA1: 654e2fe494f56cd2f15202638f5740ba36a4a585ANALYSIS DATE: 2022-10-22T03:00:27ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – danabot – 391bf3b75a97a702116de6c4da5728ee

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 391bf3b75a97a702116de6c4da5728eeSHA1: 159aa51c30f89fe432fbf2455cf55dc4d59a864bANALYSIS...

Malware Analysis – dharma – 922c5c0b02c8d6b2a13fa81ae06b8fe7

October 22, 2022

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 922c5c0b02c8d6b2a13fa81ae06b8fe7SHA1: bc7ce36da4ddbe1e9a46aca42da480391d618890ANALYSIS DATE: 2022-10-22T03:01:29ZTTPS: T1107, T1490, T1005, T1081, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – persistence – d586f9febbcc97f4671bc43c0ee0b7bd

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: d586f9febbcc97f4671bc43c0ee0b7bdSHA1: b0b73ecec702c6c7668bf9b4935f653c034e4ea6ANALYSIS DATE: 2022-10-22T03:03:54ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – 29272ff2d360fbf1e8efe1e176c90a21

October 22, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 29272ff2d360fbf1e8efe1e176c90a21SHA1: f7b4d527981d19b095b433277155971ea8e60373ANALYSIS DATE: 2022-10-22T03:00:53ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – d2c59a77d659c928936e7ecbb70a1118

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d2c59a77d659c928936e7ecbb70a1118SHA1: 68bd590e5ba983ac07faf401db295334b021c650ANALYSIS DATE: 2022-10-22T03:20:19ZTTPS: T1005, T1081, T1107, T1490, T1082, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 6a9ec5cbc5f370fed5e608e4a76e7122

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6a9ec5cbc5f370fed5e608e4a76e7122SHA1: bb93e4e90ce7f8a8a946760f93b2f910997d1450ANALYSIS DATE: 2022-10-22T03:13:16ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 31c2e85ef5e4c0009e1f18794527b4ca

October 22, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 31c2e85ef5e4c0009e1f18794527b4caSHA1: 72c6643ed5e47d326f4b19744b7cbdbf43f46c8cANALYSIS DATE: 2022-10-22T03:09:48ZTTPS: T1060, T1112, T1107, T1490, T1031, T1562, T1489 ScoreMeaningExample10Known badA...

Malware Analysis – ransomware – 6556f8919249fefdb5a3b6576162bbce

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 6556f8919249fefdb5a3b6576162bbceSHA1: 8a030a6800a4bb5acd2709bc043ccaca57e6d2bdANALYSIS DATE: 2022-10-22T03:20:30ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – ac700ee3d6fb249686ec5e39f1db966e

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: ac700ee3d6fb249686ec5e39f1db966eSHA1: 72e31b6ab578c6e9c73788ea3451bae06b82ef32ANALYSIS DATE: 2022-10-22T03:20:42ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – persistence – 3c76e5f29228f78125b84f7aa10eda16

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 3c76e5f29228f78125b84f7aa10eda16SHA1: 323442e3f8e6f7e6131abe77de5287f709c6d62cANALYSIS DATE: 2022-10-22T03:20:55ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Month: October 2022

Malware Analysis – – ba9fc3bdca857bc4e0f9a4803c1c0dee

Malware Analysis – – cfc1dcfc561553a188e2feb6c76fd508

Malware Analysis – – fd84da34b45b9d0a42923e804b3d1e51

Malware Analysis – – 1cd84ea4ac040c4ff441233daf58c307

Malware Analysis – danabot – 9bfcec5239f026bcd06dc1b0e7df8852

Malware Analysis – – 8169508a44729d8207958a0b64786b82

Malware Analysis – evasion – ddce5db099bab8bc56d5ac70d83842a0

Malware Analysis – danabot – fedd130906924384c948ec3fb50ae2c7

Malware Analysis – – 0f3d3d2005e3f5e5dad6470513e6ff0e

Malware Analysis – djvu – 061b3060475cf1621085f4d8b0d2a7cb

Malware Analysis – ransomware – 0ecb8b40f5fa991542fea3dd38f9f6af

Malware Analysis – ransomware – 8eedd3511eefee9608177fbe23df5e15

Malware Analysis – ransomware – 92d139263cdfea096dfa88b762cad95f

Malware Analysis – ransomware – b44246c1a4dec2da88d25828f4a3c568

Malware Analysis – danabot – 391bf3b75a97a702116de6c4da5728ee

Malware Analysis – dharma – 922c5c0b02c8d6b2a13fa81ae06b8fe7

Malware Analysis – persistence – d586f9febbcc97f4671bc43c0ee0b7bd

Malware Analysis – wannacry – 29272ff2d360fbf1e8efe1e176c90a21

Malware Analysis – ransomware – d2c59a77d659c928936e7ecbb70a1118

Malware Analysis – persistence – 6a9ec5cbc5f370fed5e608e4a76e7122

Malware Analysis – evasion – 31c2e85ef5e4c0009e1f18794527b4ca

Malware Analysis – ransomware – 6556f8919249fefdb5a3b6576162bbce

Malware Analysis – persistence – ac700ee3d6fb249686ec5e39f1db966e

Malware Analysis – persistence – 3c76e5f29228f78125b84f7aa10eda16

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

You may have missed