Month: October 2022

Malware Analysis – persistence – a35215aa49d53cb99f3037a7ff7e0331

October 31, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a35215aa49d53cb99f3037a7ff7e0331SHA1: 36df38bfd0a451d3a79848c4a388c1b300df1d4dANALYSIS DATE: 2022-10-30T12:53:48ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 83cd17666ca7aa0901bae1fa645003c0

October 31, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 83cd17666ca7aa0901bae1fa645003c0SHA1: 9a451df76410a2fb4386cfe623ca6e5aa969c49fANALYSIS DATE: 2022-10-30T13:52:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – 561cb3ccb6be455d0a14c721e69d44b0

October 31, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 561cb3ccb6be455d0a14c721e69d44b0SHA1: 2abeffb41f3e411cd7d3f7631b0634c62dfe7ef6ANALYSIS DATE: 2022-10-30T13:35:05ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – a3746e8404dab53ec357c105f2227690

October 31, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a3746e8404dab53ec357c105f2227690SHA1: 4b744d6410e4fef57ba27cb789c3c1749ce1ef6dANALYSIS DATE: 2022-10-30T13:52:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – a32bf8ae7a27fa0602859e51784a69e5

October 31, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a32bf8ae7a27fa0602859e51784a69e5SHA1: 93c8e0127e390fdb42253daef700e9e2c44a9d67ANALYSIS DATE: 2022-10-30T13:39:59ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – e178bd591240bb82c86fd462c2746520

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, trojanMD5: e178bd591240bb82c86fd462c2746520SHA1: ef01432f99dd91b77bdcc7945a7b522b25d7e8e1ANALYSIS DATE:...

Malware Analysis – djvu – 7a3c34f502556fbd89465e834c612cdf

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, trojanMD5: 7a3c34f502556fbd89465e834c612cdfSHA1: 882fd66dca2614692690e8a1bc64e411948d25eeANALYSIS DATE:...

Malware Analysis – evasion – a325b22295167b165248d013a5988b50

October 31, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a325b22295167b165248d013a5988b50SHA1: d47e3d0782c223824fb2f14a8abb2c98c5569c42ANALYSIS DATE: 2022-10-30T13:53:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 93a56654e298dbaf444d94a6a630e2e0

October 31, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 93a56654e298dbaf444d94a6a630e2e0SHA1: a92949bea05c7c09d9cb01578751cb405f2d30d5ANALYSIS DATE: 2022-10-30T13:53:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 34[.]126[.]143[.]129:80

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]188[.]244:443

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 162[.]14[.]69[.]252:80

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 180[.]76[.]128[.]244:8888

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]224[.]42[.]15:8080

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 195[.]133[.]40[.]133:443

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – adware – a3211cd1fb607af57abac38caed41680

October 31, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: a3211cd1fb607af57abac38caed41680SHA1: df19f2b939c4f1a2b983295cd1998f8381053d91ANALYSIS DATE: 2022-10-30T08:04:44ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – adware – 93aaadc0d0b4a41ce82654d48f857010

October 31, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 93aaadc0d0b4a41ce82654d48f857010SHA1: 45812eb55e5a2f6b360645e44b6b07fc48ec640bANALYSIS DATE: 2022-10-30T08:04:34ZTTPS: T1060, T1112, T1222, T1176 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 939c22e1dca3248837733f051b0f7cc0

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 939c22e1dca3248837733f051b0f7cc0SHA1: 67e2cb3c8b06f9d4fb91e5219f0e61f4ac555ab5ANALYSIS DATE: 2022-10-30T08:26:14ZTTPS: T1491, T1112, T1089, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 9326020b8b44ceaf9a375e94715a3f1c

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, upxMD5: 9326020b8b44ceaf9a375e94715a3f1cSHA1: 2f9f2302a8b528b7711d2ed7b3dd48e69f515cc1ANALYSIS DATE: 2022-10-30T08:29:05ZTTPS: T1112, T1082, T1060, T1158 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 43[.]143[.]214[.]210:80

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 91[.]92[.]109[.]140:443

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]14[.]47[.]145:443

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 13[.]127[.]240[.]3:80

October 31, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – a23acc5bb958ee7eb9fe6b7c6bfa8530

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojanMD5: a23acc5bb958ee7eb9fe6b7c6bfa8530SHA1: cfd2118fd68f17dc125195299b3e8aadd25e3436ANALYSIS DATE: 2022-10-30T22:32:33ZTTPS: T1060, T1112, T1082, T1158, T1088, T1089, T1005,...

Month: October 2022

Malware Analysis – persistence – a35215aa49d53cb99f3037a7ff7e0331

Malware Analysis – evasion – 83cd17666ca7aa0901bae1fa645003c0

Malware Analysis – persistence – 561cb3ccb6be455d0a14c721e69d44b0

Malware Analysis – evasion – a3746e8404dab53ec357c105f2227690

Malware Analysis – persistence – a32bf8ae7a27fa0602859e51784a69e5

Malware Analysis – djvu – e178bd591240bb82c86fd462c2746520

Malware Analysis – djvu – 7a3c34f502556fbd89465e834c612cdf

Malware Analysis – evasion – a325b22295167b165248d013a5988b50

Malware Analysis – evasion – 93a56654e298dbaf444d94a6a630e2e0

Cobalt Stike Beacon Detected – 34[.]126[.]143[.]129:80

Cobalt Stike Beacon Detected – 84[.]32[.]188[.]244:443

Cobalt Stike Beacon Detected – 162[.]14[.]69[.]252:80

Cobalt Stike Beacon Detected – 180[.]76[.]128[.]244:8888

Cobalt Stike Beacon Detected – 23[.]224[.]42[.]15:8080

Cobalt Stike Beacon Detected – 195[.]133[.]40[.]133:443

Malware Analysis – adware – a3211cd1fb607af57abac38caed41680

Malware Analysis – adware – 93aaadc0d0b4a41ce82654d48f857010

Malware Analysis – evasion – 939c22e1dca3248837733f051b0f7cc0

Malware Analysis – evasion – 9326020b8b44ceaf9a375e94715a3f1c

Cobalt Stike Beacon Detected – 43[.]143[.]214[.]210:80

Cobalt Stike Beacon Detected – 91[.]92[.]109[.]140:443

Cobalt Stike Beacon Detected – 1[.]14[.]47[.]145:443

Cobalt Stike Beacon Detected – 13[.]127[.]240[.]3:80

Malware Analysis – evasion – a23acc5bb958ee7eb9fe6b7c6bfa8530

[INCRANSOM] – Ransomware Victim: United Bakery Equipment

[ARCUSMEDIA] – Ransomware Victim: Symantric IT

[ARCUSMEDIA] – Ransomware Victim: MGEMAL

HackerOne Bug Bounty Disclosure: dom-based-cookie-bomb-in-acronis-com-via-x-clickref-get-parameter-mr-medi

HackerOne Bug Bounty Disclosure: external-storage-global-credentials-returned-to-the-client-side-in-plaintext-tuyenee

You may have missed