Month: November 2022

Malware Analysis – wannacry – bb8c30e7990a14dcfd3dd19d8fa61beb

November 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: bb8c30e7990a14dcfd3dd19d8fa61bebSHA1: d2afcdfa4af91de0a0cc4f3117f6df5c43a89dcdANALYSIS DATE: 2022-11-10T03:00:28ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – amadey – 9622732961c8efce3f9c7408ca67400b

November 10, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:vidar, botnet:517, botnet:mao, botnet:mario23_10, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 9622732961c8efce3f9c7408ca67400bSHA1:...

Malware Analysis – djvu – f7b5c5f001b078182b841654c58dd0eb

November 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f7b5c5f001b078182b841654c58dd0ebSHA1: 168d63fc06499b0d3735b3a6d3ba2383d12938abANALYSIS DATE: 2022-11-10T04:14:52ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – a27ea2e1faf2d0a3d800528e965477ed

November 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: a27ea2e1faf2d0a3d800528e965477edSHA1:...

Malware Analysis – chaos – bb7880e18ab1325325a3dc18025e7529

November 10, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: bb7880e18ab1325325a3dc18025e7529SHA1: 9aa69e6f49b5d4fc16218b5297f231a3e9a77726ANALYSIS DATE: 2022-11-10T04:51:03ZTTPS: T1490, T1059, T1107, T1082, T1060, T1112,...

Malware Analysis – ransomware – 6393da329d9a87f31b9c75e41bcc05b2

November 10, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6393da329d9a87f31b9c75e41bcc05b2SHA1: b1d0df75eb3d37b82564454cf09695fc18741eaeANALYSIS DATE: 2022-11-10T05:13:03ZTTPS: T1082, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – 916ca2273debc1743307562e9b16aabd

November 10, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 916ca2273debc1743307562e9b16aabdSHA1: 240b8e460be45891cd2529620b13afd230c5bc47ANALYSIS DATE: 2022-11-10T05:07:03ZTTPS: T1490, T1059, T1107, T1060, T1112, T1491,...

Malware Analysis – ransomware – 8d809510a9ae7b8ef6fc6a25e5feaa22

November 10, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8d809510a9ae7b8ef6fc6a25e5feaa22SHA1: eb0888326adbbbdf1537a965c4d26c71549d43f6ANALYSIS DATE: 2022-11-10T05:18:03ZTTPS: T1059, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – wannacry – 4d0f73bef7510e4285435f7c51749591

November 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 4d0f73bef7510e4285435f7c51749591SHA1: cb356572047363ae5f4baf16ba48e82946dec259ANALYSIS DATE: 2022-11-10T05:40:31ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – e75131f3c4c0a53031df7d659a35cfda

November 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: e75131f3c4c0a53031df7d659a35cfdaSHA1: d75d4509abfba82281b933546897f5f091b087ffANALYSIS DATE: 2022-11-10T05:40:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – c09b457742d6f801f016e53f92759da2

November 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: c09b457742d6f801f016e53f92759da2SHA1: 09fd8aceb7cc15af5f1f86eaaa775e855d3c6f5cANALYSIS DATE: 2022-11-10T05:40:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 10, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 129[.]226[.]92[.]29:80

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]189[.]4[.]164:443

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 192[.]248[.]151[.]121:8443

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]43[.]4[.]39:8009

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]216[.]71[.]230:443

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]40[.]99[.]143:3333

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]134[.]94[.]89:8000

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – teslacrypt – 3dd401698586fc163555e651596621d5

November 10, 2022

Score: 10 MALWARE FAMILY: teslacryptTAGS:family:teslacrypt, persistence, ransomwareMD5: 3dd401698586fc163555e651596621d5SHA1: d17e5d37d45f60df5b8752e5a44a28de1b70da6bANALYSIS DATE: 2022-11-08T16:32:29ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – 28e292e874ee9da1341b55783ffc9c02

November 10, 2022

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, ransomware, spyware, stealerMD5: 28e292e874ee9da1341b55783ffc9c02SHA1: 0148b8e1c49981fc4ddaf6e988b0559161f31b51ANALYSIS DATE: 2022-11-08T16:04:46ZTTPS: T1046, T1082, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – xorist – 0fbf8c91afd09939c5ad7edc5ebb3c62

November 10, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 0fbf8c91afd09939c5ad7edc5ebb3c62SHA1: a13a0edaf4b9619d594ea661f210d398bb48ff9eANALYSIS DATE: 2022-11-08T16:17:21ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 0dcd99e0a058eaca50e5e9b8c3c47990

November 10, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 0dcd99e0a058eaca50e5e9b8c3c47990SHA1: 662a312360f5586abb55a6f4adf5a2d2109a07a0ANALYSIS DATE: 2022-11-08T16:17:49ZTTPS: T1112, T1082, T1060, T1107, T1490 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 20[.]73[.]54[.]98:443

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Month: November 2022

Malware Analysis – wannacry – bb8c30e7990a14dcfd3dd19d8fa61beb

Malware Analysis – amadey – 9622732961c8efce3f9c7408ca67400b

Malware Analysis – djvu – f7b5c5f001b078182b841654c58dd0eb

Malware Analysis – djvu – a27ea2e1faf2d0a3d800528e965477ed

Malware Analysis – chaos – bb7880e18ab1325325a3dc18025e7529

Malware Analysis – ransomware – 6393da329d9a87f31b9c75e41bcc05b2

Malware Analysis – chaos – 916ca2273debc1743307562e9b16aabd

Malware Analysis – ransomware – 8d809510a9ae7b8ef6fc6a25e5feaa22

Malware Analysis – wannacry – 4d0f73bef7510e4285435f7c51749591

Malware Analysis – wannacry – e75131f3c4c0a53031df7d659a35cfda

Malware Analysis – wannacry – c09b457742d6f801f016e53f92759da2

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Cobalt Stike Beacon Detected – 129[.]226[.]92[.]29:80

Cobalt Stike Beacon Detected – 107[.]189[.]4[.]164:443

Cobalt Stike Beacon Detected – 192[.]248[.]151[.]121:8443

Cobalt Stike Beacon Detected – 101[.]43[.]4[.]39:8009

Cobalt Stike Beacon Detected – 185[.]216[.]71[.]230:443

Cobalt Stike Beacon Detected – 121[.]40[.]99[.]143:3333

Cobalt Stike Beacon Detected – 8[.]134[.]94[.]89:8000

Malware Analysis – teslacrypt – 3dd401698586fc163555e651596621d5

Malware Analysis – discovery – 28e292e874ee9da1341b55783ffc9c02

Malware Analysis – xorist – 0fbf8c91afd09939c5ad7edc5ebb3c62

Malware Analysis – evasion – 0dcd99e0a058eaca50e5e9b8c3c47990

Cobalt Stike Beacon Detected – 20[.]73[.]54[.]98:443

[FUNKSEC] – Ransomware Victim: netox[.]net

[RANSOMHUB] – Ransomware Victim: sensualcollection[.]com

[RHYSIDA] – Ransomware Victim: T Smiles Dental

[SAFEPAY] – Ransomware Victim: itca[.]edu[.]sv

[HELLCAT] – Ransomware Victim: Pinger – USA

You may have missed