Month: October 2022

Malware Analysis – ransomware – dd9d34b2bcaf57ed5192ca1b73139a46

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: dd9d34b2bcaf57ed5192ca1b73139a46SHA1: 5b3e4f618ab14b7ac03dfd732fede5ace95d5566ANALYSIS DATE: 2022-10-12T08:42:07ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – agilenet – 0906bfbcac00c26b080d3ba4f4542579

October 12, 2022

Score: 9 MALWARE FAMILY: agilenetTAGS:agilenet, evasion, themida, trojanMD5: 0906bfbcac00c26b080d3ba4f4542579SHA1: eca76f73d94d388b51d3b5f97525ab49fb47f8c6ANALYSIS DATE: 2022-10-12T08:50:51ZTTPS: T1012, T1497, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – e7af06880e648da328b170608a6ab9e4

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e7af06880e648da328b170608a6ab9e4SHA1: 3148ecca25ac16843b80c289b98ef663ee3ed5e7ANALYSIS DATE: 2022-10-12T08:42:07ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 46841f22a5e3c6f4d1f19a09ce2e85a7

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 46841f22a5e3c6f4d1f19a09ce2e85a7SHA1: 00e17f432ea96b23bd530a9bf84d1884c41315ddANALYSIS DATE: 2022-10-12T08:42:07ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – chaos – e94273df0cf8cfcc0388c1766b95db35

October 12, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: e94273df0cf8cfcc0388c1766b95db35SHA1: c9e94a5c814ac1deeed5156deea9554c235669c8ANALYSIS DATE: 2022-10-12T09:01:04ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – chaos – 972a7ec082b4f656e83ab52cc2d33ad9

October 12, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: 972a7ec082b4f656e83ab52cc2d33ad9SHA1: 95c354498543071fa3501f3be69fe73ebd437171ANALYSIS DATE: 2022-10-12T09:01:04ZTTPS: T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 4bcbc94309a30321de467b75b11ddafc

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4bcbc94309a30321de467b75b11ddafcSHA1: c32afe3534e04cdd129bd5b971a7dc1e4842c2feANALYSIS DATE: 2022-10-12T09:22:07ZTTPS: T1222, T1053, T1130, T1112,...

Malware Analysis – ransomware – 641645f7373be3c2e7575bcc67256a95

October 12, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 641645f7373be3c2e7575bcc67256a95SHA1: 281595d0916272e209626fb753186419d217d6daANALYSIS DATE: 2022-10-12T09:27:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 120[.]77[.]18[.]7:8443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 193[.]149[.]180[.]68:443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 158[.]247[.]238[.]127:443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – danabot – 3ba364b7ab9f5fadb3a784c1b9b206eb

October 12, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 3ba364b7ab9f5fadb3a784c1b9b206ebSHA1:...

Malware Analysis – ransomware – 0402655e4f75daffcc9beadc441a0bce

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0402655e4f75daffcc9beadc441a0bceSHA1: 8cf30f46b324180e8df5ce69cdb8f2e47e6267fcANALYSIS DATE: 2022-10-12T09:41:05ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 16802b405f185879f0b27dae7d8a5c71

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 16802b405f185879f0b27dae7d8a5c71SHA1: 49596f69dae97b8f52ac8d3b5055b0bd72e6062cANALYSIS DATE: 2022-10-12T09:41:07ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – a4dd607fdd3faeaf41f98d46f2ed643d

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a4dd607fdd3faeaf41f98d46f2ed643dSHA1: 25001d944680a673f669623ee2b508eb4b10198eANALYSIS DATE: 2022-10-12T09:41:06ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 185[.]236[.]202[.]202:443

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]24[.]204[.]74:80

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]35:80

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 159[.]223[.]16[.]152:80

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – neshta – 54c2b90fd9364cd39cecff8ab112b825

October 12, 2022

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 54c2b90fd9364cd39cecff8ab112b825SHA1: 96c0c98dcce84e3bbec643083ce675664173bfd2ANALYSIS DATE: 2022-10-12T09:58:04ZTTPS: T1005, T1081, T1112, T1042, T1082,...

Malware Analysis – netwalker – 80372de850597bd9e7e021a94f13f0a1

October 12, 2022

Score: 10 MALWARE FAMILY: netwalkerTAGS:family:netwalker, ransomware, spyware, stealerMD5: 80372de850597bd9e7e021a94f13f0a1SHA1: 037db820c8dee94ae25a439b758a2b89f527cbb4ANALYSIS DATE: 2022-10-12T09:57:03ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 3fd2bbeeef907e2943ff4e2f6fb24e9a

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3fd2bbeeef907e2943ff4e2f6fb24e9aSHA1: e403f202f605fdf9f928c135e55d32ee8757a4fbANALYSIS DATE: 2022-10-12T09:56:22ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – – cfd31737ccacf6e9a0e2ac18cf3445ac

October 12, 2022

Score: 4 MALWARE FAMILY: TAGS:MD5: cfd31737ccacf6e9a0e2ac18cf3445acSHA1: 74c615ca54aaff3c5e6734efef04259290c357baANALYSIS DATE: 2022-10-12T09:58:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 43[.]138[.]66[.]190:8848

October 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Month: October 2022

Malware Analysis – ransomware – dd9d34b2bcaf57ed5192ca1b73139a46

Malware Analysis – agilenet – 0906bfbcac00c26b080d3ba4f4542579

Malware Analysis – ransomware – e7af06880e648da328b170608a6ab9e4

Malware Analysis – ransomware – 46841f22a5e3c6f4d1f19a09ce2e85a7

Malware Analysis – chaos – e94273df0cf8cfcc0388c1766b95db35

Malware Analysis – chaos – 972a7ec082b4f656e83ab52cc2d33ad9

Malware Analysis – djvu – 4bcbc94309a30321de467b75b11ddafc

Malware Analysis – ransomware – 641645f7373be3c2e7575bcc67256a95

Cobalt Stike Beacon Detected – 120[.]77[.]18[.]7:8443

Cobalt Stike Beacon Detected – 193[.]149[.]180[.]68:443

Cobalt Stike Beacon Detected – 158[.]247[.]238[.]127:443

Malware Analysis – danabot – 3ba364b7ab9f5fadb3a784c1b9b206eb

Malware Analysis – ransomware – 0402655e4f75daffcc9beadc441a0bce

Malware Analysis – ransomware – 16802b405f185879f0b27dae7d8a5c71

Malware Analysis – ransomware – a4dd607fdd3faeaf41f98d46f2ed643d

Cobalt Stike Beacon Detected – 185[.]236[.]202[.]202:443

Cobalt Stike Beacon Detected – 120[.]24[.]204[.]74:80

Cobalt Stike Beacon Detected – 77[.]73[.]134[.]35:80

Cobalt Stike Beacon Detected – 159[.]223[.]16[.]152:80

Malware Analysis – neshta – 54c2b90fd9364cd39cecff8ab112b825

Malware Analysis – netwalker – 80372de850597bd9e7e021a94f13f0a1

Malware Analysis – djvu – 3fd2bbeeef907e2943ff4e2f6fb24e9a

Malware Analysis – – cfd31737ccacf6e9a0e2ac18cf3445ac

Cobalt Stike Beacon Detected – 43[.]138[.]66[.]190:8848

[HUNTERS] – Ransomware Victim: Orshan, Spann & Fernandez-Mesa

[HUNTERS] – Ransomware Victim: JN attorney

[INCRANSOM] – Ransomware Victim: Hadwins Volkswagen

[LYNX] – Ransomware Victim: Hypertype

[INCRANSOM] – Ransomware Victim: Nicholsons Solicitors

You may have missed