Month: October 2022

Malware Analysis – discovery – feba408eb9862548dc19c524be12f2b8

October 15, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: feba408eb9862548dc19c524be12f2b8SHA1: 8e6af2bd48523d64aafe150b89a3eca61cad0d58ANALYSIS DATE: 2022-10-14T21:40:05ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – 4448083027bde42252a132ba5be0bd25

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4448083027bde42252a132ba5be0bd25SHA1: 2637028e5bccda6f186f1f323e97bdd5858b90a3ANALYSIS DATE: 2022-10-14T22:06:05ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – dfb89b842afd8be96bca529084ebbd77

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: dfb89b842afd8be96bca529084ebbd77SHA1: ff68271ede970bea75d00dd5a55ae9a4301a61b4ANALYSIS DATE: 2022-10-14T22:04:27ZTTPS: T1059, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 4bd4fcdf39d6c79a71884a80ac3cafe7

October 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4bd4fcdf39d6c79a71884a80ac3cafe7SHA1: 1e05ec01474a5be43d96e03db9ae43838e9ada03ANALYSIS DATE: 2022-10-14T21:44:53ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – discovery – 442b1d885cd1900bb4881ddd90e4636c

October 15, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 442b1d885cd1900bb4881ddd90e4636cSHA1: 6547f759a860d21464f319683fddfc87742f8b46ANALYSIS DATE: 2022-10-14T22:06:00ZTTPS: T1082, T1012, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 198[.]98[.]59[.]150:8443

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]222[.]69[.]133:80

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 47a4be9f3efb164ba1e5d2ff2eabb74b

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 47a4be9f3efb164ba1e5d2ff2eabb74bSHA1: a85ce91292ab43b7e683f95cc2028f35d1cc86e1ANALYSIS DATE: 2022-10-14T22:12:08ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 445b6f8ea1ef74e908a4fbc9605e600b

October 15, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 445b6f8ea1ef74e908a4fbc9605e600bSHA1: 399c9f1551bdd54119dd3376ada59dcddb0fdbd3ANALYSIS DATE: 2022-10-14T22:09:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 544dddaf50ca3f238f5aba58f5c13f17

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 544dddaf50ca3f238f5aba58f5c13f17SHA1: b82cba6a89fa17f6812466f73f91bcb194808e3fANALYSIS DATE: 2022-10-14T22:24:12ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 580967464f817cbc58c3509c5df320e0

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 580967464f817cbc58c3509c5df320e0SHA1: 245cc7171d3adc098dea588f8f64a57ad6c72ebfANALYSIS DATE: 2022-10-14T22:27:13ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 89[.]208[.]105[.]2:443

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]77:4443

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 147[.]182[.]237[.]165:80

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]3:443

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 5e2e7b3f7863f8911ce2a06fab3036cc

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 5e2e7b3f7863f8911ce2a06fab3036ccSHA1: 36b1e25567903f38043f351c714773c36989a632ANALYSIS DATE: 2022-10-14T22:30:21ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 7c216cf238bfdc997e0b633fcdb92e48

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7c216cf238bfdc997e0b633fcdb92e48SHA1: 260c4eca900577511c5c938465fd21b42e390361ANALYSIS DATE: 2022-10-14T22:54:25ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 628c75f61ea69dddf4701be60aa7ec4a

October 15, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 628c75f61ea69dddf4701be60aa7ec4aSHA1: 2cb7ee2d3e875159573d16db3ce69d2aa616cc0eANALYSIS DATE: 2022-10-14T22:33:16ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 76fa3773e54388154a9d68a74d7dd707

October 15, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 76fa3773e54388154a9d68a74d7dd707SHA1: 99b3d72a040422069ee3812bbacdf31b926d3132ANALYSIS DATE: 2022-10-14T22:51:22ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Month: October 2022

Malware Analysis – discovery – feba408eb9862548dc19c524be12f2b8

Malware Analysis – ransomware – 4448083027bde42252a132ba5be0bd25

Malware Analysis – ransomware – dfb89b842afd8be96bca529084ebbd77

Malware Analysis – djvu – 4bd4fcdf39d6c79a71884a80ac3cafe7

Malware Analysis – discovery – 442b1d885cd1900bb4881ddd90e4636c

Cobalt Stike Beacon Detected – 198[.]98[.]59[.]150:8443

Cobalt Stike Beacon Detected – 124[.]222[.]69[.]133:80

Malware Analysis – ransomware – 47a4be9f3efb164ba1e5d2ff2eabb74b

Malware Analysis – smokeloader – 445b6f8ea1ef74e908a4fbc9605e600b

Malware Analysis – ransomware – 544dddaf50ca3f238f5aba58f5c13f17

Malware Analysis – ransomware – 580967464f817cbc58c3509c5df320e0

Cobalt Stike Beacon Detected – 89[.]208[.]105[.]2:443

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]77:4443

Cobalt Stike Beacon Detected – 147[.]182[.]237[.]165:80

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]3:443

Malware Analysis – ransomware – 5e2e7b3f7863f8911ce2a06fab3036cc

Malware Analysis – ransomware – 7c216cf238bfdc997e0b633fcdb92e48

Malware Analysis – smokeloader – 628c75f61ea69dddf4701be60aa7ec4a

Malware Analysis – smokeloader – 76fa3773e54388154a9d68a74d7dd707

Cobalt Stike Beacon Detected – 159[.]223[.]16[.]152:443

Cobalt Stike Beacon Detected – 124[.]221[.]35[.]184:443

Cobalt Stike Beacon Detected – 114[.]115[.]208[.]101:8080

Cobalt Stike Beacon Detected – 123[.]57[.]57[.]203:443

LockBit 3.0 Ransomware Victim: bankruptcypa[.]com

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

You may have missed