Month: October 2022

Malware Analysis – evasion – 658d4950dbc04072e1ed1f2f1b5204b0

October 12, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 658d4950dbc04072e1ed1f2f1b5204b0SHA1: aec694f67a173222721118651711b969fbbfe55dANALYSIS DATE: 2022-10-11T17:28:02ZTTPS: T1088, T1089, T1112, T1060, T1004, T1082,...

Malware Analysis – persistence – 6fcdf8e4e096f17b789d0722d42a80c0

October 12, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6fcdf8e4e096f17b789d0722d42a80c0SHA1: 26d8784b92e98af4709d29a8f58129405cae6133ANALYSIS DATE: 2022-10-11T18:43:42ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 2a84d25e0679adc9644e70103326cb50

October 12, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2a84d25e0679adc9644e70103326cb50SHA1: 03587e348c5b50c08ad067d4e3e30ccdd81bb613ANALYSIS DATE: 2022-10-11T17:36:44ZTTPS: T1490, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – persistence – 2cd3b2d532385451b2ce4e19983c88a0

October 12, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 2cd3b2d532385451b2ce4e19983c88a0SHA1: 75d4fd48e64529129cff1654ba57417d0e8399e9ANALYSIS DATE: 2022-10-11T18:13:58ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 11dc4c02d1217da78f3242f4bfcd58e0

October 12, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 11dc4c02d1217da78f3242f4bfcd58e0SHA1: c72ef51760802755b1c83d42b7365389a89b1ef1ANALYSIS DATE: 2022-10-11T17:55:42ZTTPS: T1491, T1112, T1082, T1060, T1107, T1490 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – 554f360169bfac0f1852e570bd41fde0

October 12, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 554f360169bfac0f1852e570bd41fde0SHA1: 39cf01b10a6cc438a27cbe981d63a3be5f312256ANALYSIS DATE: 2022-10-11T19:30:34ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 6c87c3bbdb17a4716e668c2b78db16c0

October 12, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6c87c3bbdb17a4716e668c2b78db16c0SHA1: e3de17df8e20cfc37bcd18233cdc103278d8d250ANALYSIS DATE: 2022-10-11T18:59:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 1b4149c637c925082ee78dfdfd322210

October 12, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 1b4149c637c925082ee78dfdfd322210SHA1: 972515af63c02ec38feff8454ab3e42c5c2bbfa6ANALYSIS DATE: 2022-10-11T19:30:38ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 2211f6a74130c2974f66dc7cc2145df0

October 12, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 2211f6a74130c2974f66dc7cc2145df0SHA1: 175e8955c04f0556d60859f460c22d4aea47a8aeANALYSIS DATE: 2022-10-11T18:46:42ZTTPS: T1060, T1112, T1082, T1088, T1089, T1158,...

BlackCat/ALPHV Ransomware Victim: Midwest Petroleum

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malware Analysis – evasion – 185fba63c25db9d2d63cd4ce519c35b7

October 12, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomware, spyware, stealer, upxMD5: 185fba63c25db9d2d63cd4ce519c35b7SHA1: c4d034ede11dcd493ee28f7fc632a4795d7bf665ANALYSIS DATE: 2022-10-11T19:55:02ZTTPS: T1057, T1158, T1112, T1005, T1081, T1107, T1490,...

Malware Analysis – evasion – 056d4e0dee2ed3bae61a3f448d4a079c

October 12, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 056d4e0dee2ed3bae61a3f448d4a079cSHA1: 43a23cfc4fd5ae9b41f20734ff78d845254fe45bANALYSIS DATE: 2022-10-11T19:58:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – c850f942ccf6e45230169cc4bd9eb5c8

October 12, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: c850f942ccf6e45230169cc4bd9eb5c8SHA1: 51c647e2b150e781bd1910cac4061a2cee1daf89ANALYSIS DATE: 2022-10-12T02:08:47ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 8f7da1f9d1716d1850448b0dcb52c03f

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8f7da1f9d1716d1850448b0dcb52c03fSHA1: ccd7d15c3f0b57ee1a6cfd5e75505c768d4c445fANALYSIS DATE: 2022-10-12T02:10:46ZTTPS: T1005, T1081, T1082, T1053,...

BlackCat/ALPHV Ransomware Victim: Pinnacle Incorporated

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Clarion Communication Management Ltd

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Knoll

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Simex Defence Inc

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malware Analysis – ransomware – 21bc1c5e98d4bf41365a44e88086c31f

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 21bc1c5e98d4bf41365a44e88086c31fSHA1: 9ecb76a713e8f29541766ea894bc0c62fadc7424ANALYSIS DATE: 2022-10-12T03:39:07ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – spyware – 644399a0aff07bd4f7dc1eb5aa5c0236

October 12, 2022

Score: 8 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 644399a0aff07bd4f7dc1eb5aa5c0236SHA1: 243f1f7bb95af8d3c44a270772f408c6febb06afANALYSIS DATE: 2022-10-12T02:30:33ZTTPS: T1012, T1082, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – smokeloader – f24080143671873e32f7c8ec1b118208

October 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f24080143671873e32f7c8ec1b118208SHA1: 303041ee15dd2f2e65d8a9989a7477a709e95ec8ANALYSIS DATE: 2022-10-12T03:06:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – e808bb23350d08b14a9119b692c8ee58

October 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e808bb23350d08b14a9119b692c8ee58SHA1: 6aa51612791dee2862fe36cab58b1bbfa4513df9ANALYSIS DATE: 2022-10-12T02:32:58ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

BlackCat/ALPHV Ransomware Victim: The Hibbert Group

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Notos Com

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Month: October 2022

Malware Analysis – evasion – 658d4950dbc04072e1ed1f2f1b5204b0

Malware Analysis – persistence – 6fcdf8e4e096f17b789d0722d42a80c0

Malware Analysis – evasion – 2a84d25e0679adc9644e70103326cb50

Malware Analysis – persistence – 2cd3b2d532385451b2ce4e19983c88a0

Malware Analysis – persistence – 11dc4c02d1217da78f3242f4bfcd58e0

Malware Analysis – evasion – 554f360169bfac0f1852e570bd41fde0

Malware Analysis – evasion – 6c87c3bbdb17a4716e668c2b78db16c0

Malware Analysis – evasion – 1b4149c637c925082ee78dfdfd322210

Malware Analysis – evasion – 2211f6a74130c2974f66dc7cc2145df0

BlackCat/ALPHV Ransomware Victim: Midwest Petroleum

Malware Analysis – evasion – 185fba63c25db9d2d63cd4ce519c35b7

Malware Analysis – evasion – 056d4e0dee2ed3bae61a3f448d4a079c

Malware Analysis – evasion – c850f942ccf6e45230169cc4bd9eb5c8

Malware Analysis – djvu – 8f7da1f9d1716d1850448b0dcb52c03f

BlackCat/ALPHV Ransomware Victim: Pinnacle Incorporated

BlackCat/ALPHV Ransomware Victim: Clarion Communication Management Ltd

BlackCat/ALPHV Ransomware Victim: Knoll

BlackCat/ALPHV Ransomware Victim: Simex Defence Inc

Malware Analysis – ransomware – 21bc1c5e98d4bf41365a44e88086c31f

Malware Analysis – spyware – 644399a0aff07bd4f7dc1eb5aa5c0236

Malware Analysis – smokeloader – f24080143671873e32f7c8ec1b118208

Malware Analysis – smokeloader – e808bb23350d08b14a9119b692c8ee58

BlackCat/ALPHV Ransomware Victim: The Hibbert Group

BlackCat/ALPHV Ransomware Victim: Notos Com

[HUNTERS] – Ransomware Victim: Orshan, Spann & Fernandez-Mesa

[HUNTERS] – Ransomware Victim: JN attorney

[INCRANSOM] – Ransomware Victim: Hadwins Volkswagen

[LYNX] – Ransomware Victim: Hypertype

[INCRANSOM] – Ransomware Victim: Nicholsons Solicitors

You may have missed