Month: November 2022

Malware Analysis – ransomware – 76c1070a673007b161f938eb1b48f3e0

November 26, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 76c1070a673007b161f938eb1b48f3e0SHA1: dbbacac215dc0d3f4c119674ceb4689799db2b42ANALYSIS DATE: 2022-11-25T19:17:15ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – deba907b5cfc77a876c20a4ca16c15ab

November 26, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: deba907b5cfc77a876c20a4ca16c15abSHA1: 4ad15097ce0e20a7ca1ac1522551149b3862507bANALYSIS DATE: 2022-11-25T19:14:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 29efe40de5e0a76cecf0142310c6f968

November 26, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 29efe40de5e0a76cecf0142310c6f968SHA1: 842c446aa0b12c05483b5e9d72b9aaa6354ed2bdANALYSIS DATE: 2022-11-25T19:20:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 1d76f25260d6dc064555786ce65fb570

November 26, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1d76f25260d6dc064555786ce65fb570SHA1: 31cbe7487304d79629fb545266cce068b0e4d61eANALYSIS DATE: 2022-11-25T19:24:20ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ctblocker – d9687bcc9a27bcd0f13b9582edb06f67

November 26, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: d9687bcc9a27bcd0f13b9582edb06f67SHA1: a74a952457d1bc2edb9d459852fe823615870f60ANALYSIS DATE: 2022-11-25T19:31:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 678bd5d6ad5a247547f59ad09bc5b86e

November 26, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 678bd5d6ad5a247547f59ad09bc5b86eSHA1: 52e94341b3a400ead9447157aaca3f61c6c1c901ANALYSIS DATE: 2022-11-25T19:41:44ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – – 0f4b7f6da9b1375839b3e96dd2ca8c3d

November 26, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: 0f4b7f6da9b1375839b3e96dd2ca8c3dSHA1: d7c72fa3e4972152dda761682ab3e80b44842283ANALYSIS DATE: 2022-11-26T05:41:52ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – infostealer – ae66ee22ec17e27185e60ca0a7af071e

November 26, 2022

Score: 8 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: ae66ee22ec17e27185e60ca0a7af071eSHA1: c538988251184293a1ce7ad45f3c1df6cf2a7bbaANALYSIS DATE: 2022-11-25T20:33:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 5bb139dff54a909efc50ede9269cbf97

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, stealerMD5: 5bb139dff54a909efc50ede9269cbf97SHA1: 5b3897979ac24fdb175f12bc8bce4e43db5dd232ANALYSIS DATE: 2022-11-26T03:50:59ZTTPS: T1222, T1060, T1112, T1082, T1012 ScoreMeaningExample10Known...

Malware Analysis – djvu – 23f734fab44ce50b7a9aa8313ab97377

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 23f734fab44ce50b7a9aa8313ab97377SHA1: ad1562760cec6dd7a7c1fcb2dab8422c619bfa5bANALYSIS DATE: 2022-11-26T04:04:09ZTTPS:...

Month: November 2022

Malware Analysis – ransomware – 76c1070a673007b161f938eb1b48f3e0

Malware Analysis – ransomware – deba907b5cfc77a876c20a4ca16c15ab

Malware Analysis – ransomware – 29efe40de5e0a76cecf0142310c6f968

Malware Analysis – ransomware – 1d76f25260d6dc064555786ce65fb570

Malware Analysis – ctblocker – d9687bcc9a27bcd0f13b9582edb06f67

Malware Analysis – evasion – 678bd5d6ad5a247547f59ad09bc5b86e

Malware Analysis – – 0f4b7f6da9b1375839b3e96dd2ca8c3d

Malware Analysis – infostealer – ae66ee22ec17e27185e60ca0a7af071e

Malware Analysis – djvu – 5bb139dff54a909efc50ede9269cbf97

Malware Analysis – djvu – 23f734fab44ce50b7a9aa8313ab97377

Devices from Dell, HP, and Lenovo used outdated OpenSSL versions

LockBit 3.0 Ransomware Victim: metaage[.]com[.]tw

Cobalt Stike Beacon Detected – 52[.]68[.]245[.]22:443

Cobalt Stike Beacon Detected – 35[.]89[.]100[.]123:4567

Cobalt Stike Beacon Detected – 182[.]43[.]110[.]95:9443

Cobalt Stike Beacon Detected – 82[.]157[.]149[.]194:10000

Cobalt Stike Beacon Detected – 185[.]217[.]1[.]30:443

Cobalt Stike Beacon Detected – 109[.]162[.]250[.]191:80

Cobalt Stike Beacon Detected – 114[.]115[.]161[.]127:443

Cobalt Stike Beacon Detected – 5[.]199[.]168[.]229:443

Cobalt Stike Beacon Detected – 45[.]207[.]55[.]97:80

Cobalt Stike Beacon Detected – 195[.]206[.]181[.]151:443

Cobalt Stike Beacon Detected – 174[.]139[.]150[.]102:80

Cobalt Stike Beacon Detected – 139[.]60[.]161[.]164:4433

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

You may have missed