Month: November 2022

Malware Analysis – ransomware – e567f7a9fae0eb0c61e77c7943eb4509

November 27, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e567f7a9fae0eb0c61e77c7943eb4509SHA1: d28ded0317d3aba5f232c4728bedcf266672a083ANALYSIS DATE: 2022-11-26T18:48:47ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 7028587b1ef49b0826c8107b4e14bd58

November 27, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 7028587b1ef49b0826c8107b4e14bd58SHA1: 830dfa61f2889854f4f5a342fec253b590c4d3ceANALYSIS DATE: 2022-11-26T19:21:47ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – ffc21561f5ffc51e341b387b60bb262f

November 27, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ffc21561f5ffc51e341b387b60bb262fSHA1: fa6155ab4afc9628dd1018414879c97d81e7053eANALYSIS DATE: 2022-11-26T19:24:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – a8685ea3368fc45a93e3f18280959175

November 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a8685ea3368fc45a93e3f18280959175SHA1: 75c52bc85e472e49604d3f381876c173863c82a3ANALYSIS DATE: 2022-11-26T19:00:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 640960039dc458b222603a8a0b8d01ee

November 27, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 640960039dc458b222603a8a0b8d01eeSHA1: ca4a4f3e16e0886f84e30d1037dd8a666bd52fd5ANALYSIS DATE: 2022-11-26T19:00:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 45[.]135[.]134[.]95:80

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]199[.]168[.]233:443

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]217[.]1[.]30:80

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 0ff10287b4c50e0d11ab998a28529415

November 27, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealer, upxMD5: 0ff10287b4c50e0d11ab998a28529415SHA1: d44462becb1770b6477e1f15d12f78d17f7f11b8ANALYSIS DATE: 2022-11-26T19:31:29ZTTPS: T1082, T1005, T1081, T1130, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 6748ee6231c58aaa46ca75fdd67e7977

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6748ee6231c58aaa46ca75fdd67e7977SHA1: 4a69b1027b33f3c37a0346c0290281e4e876cbf2ANALYSIS DATE: 2022-11-26T19:32:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – d8058de44575f19e972ef72750cfbb18

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d8058de44575f19e972ef72750cfbb18SHA1: e8983d548f55314ec6e79fff59451f61afa09e2eANALYSIS DATE: 2022-11-26T19:40:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – b8f9ddd71128dff0dbdc09b0e3eeeb96

November 27, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b8f9ddd71128dff0dbdc09b0e3eeeb96SHA1: ffba5a304d0ea417f7faf8be3094b5f6f0e143c9ANALYSIS DATE: 2022-11-26T19:42:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:9301

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 123[.]57[.]232[.]6:443

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 173[.]199[.]70[.]153:443

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 142[.]93[.]213[.]188:80

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – c6f7172a85250e72cae1d1f91797b41b

November 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: c6f7172a85250e72cae1d1f91797b41bSHA1: eba651c68987069448561df00c61afa3c81b8fd5ANALYSIS DATE: 2022-11-26T19:42:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 431232b494d07b315f9b579590ebe0e8

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 431232b494d07b315f9b579590ebe0e8SHA1: e2634482c775d92034f2caec7bb40c86c5a2f92cANALYSIS DATE: 2022-11-26T19:51:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 88926eab16184bf1d072494ac6fe1147

November 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 88926eab16184bf1d072494ac6fe1147SHA1: 724b53a3d7bf9e0feeafe8c379ff0f839e847e81ANALYSIS DATE: 2022-11-26T19:43:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – eaa90d0307dc1ae0ecd3f56abd24b92b

November 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: eaa90d0307dc1ae0ecd3f56abd24b92bSHA1: 306ca9ce1a33f02e010f3db990f3bc75db330dbcANALYSIS DATE: 2022-11-27T09:31:48ZTTPS: T1082, T1005, T1081, T1060,...

Month: November 2022

Malware Analysis – ransomware – e567f7a9fae0eb0c61e77c7943eb4509

Malware Analysis – discovery – 7028587b1ef49b0826c8107b4e14bd58

Malware Analysis – ransomware – ffc21561f5ffc51e341b387b60bb262f

Malware Analysis – evasion – a8685ea3368fc45a93e3f18280959175

Malware Analysis – evasion – 640960039dc458b222603a8a0b8d01ee

Cobalt Stike Beacon Detected – 45[.]135[.]134[.]95:80

Cobalt Stike Beacon Detected – 5[.]199[.]168[.]233:443

Cobalt Stike Beacon Detected – 185[.]217[.]1[.]30:80

Malware Analysis – ransomware – 0ff10287b4c50e0d11ab998a28529415

Malware Analysis – ransomware – 6748ee6231c58aaa46ca75fdd67e7977

Malware Analysis – ransomware – d8058de44575f19e972ef72750cfbb18

Malware Analysis – ransomware – b8f9ddd71128dff0dbdc09b0e3eeeb96

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:9301

Cobalt Stike Beacon Detected – 123[.]57[.]232[.]6:443

Cobalt Stike Beacon Detected – 173[.]199[.]70[.]153:443

Cobalt Stike Beacon Detected – 142[.]93[.]213[.]188:80

Malware Analysis – evasion – c6f7172a85250e72cae1d1f91797b41b

Malware Analysis – ransomware – 431232b494d07b315f9b579590ebe0e8

Malware Analysis – evasion – 88926eab16184bf1d072494ac6fe1147

Malware Analysis – djvu – eaa90d0307dc1ae0ecd3f56abd24b92b

Cobalt Stike Beacon Detected – 43[.]143[.]18[.]98:8082

Cobalt Stike Beacon Detected – 101[.]42[.]89[.]186:2083

Cobalt Stike Beacon Detected – 174[.]139[.]150[.]171:4443

Cobalt Stike Beacon Detected – 101[.]34[.]36[.]50:1111

[APT73] – Ransomware Victim: gureco[.]pl

[APT73] – Ransomware Victim: lgpunjab[.]gov[.]in

[INCRANSOM] – Ransomware Victim: IPE Engwicht

[HUNTERS] – Ransomware Victim: Aeris Energy

[HUNTERS] – Ransomware Victim: Jones & Mayer

You may have missed