Month: November 2022

Malware Analysis – ransomware – 18eefa61b11d2f37dbd389c0d46004b6

November 24, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 18eefa61b11d2f37dbd389c0d46004b6SHA1: 3f7a11822cccd83e0fe1b2d8cf5d68211103a7b5ANALYSIS DATE: 2022-11-23T18:56:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – dd8411270ae082c092f9c7f5cb368d84

November 24, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: dd8411270ae082c092f9c7f5cb368d84SHA1: 9ce71612e47ccde022e6669fb6bdd1497ece544bANALYSIS DATE: 2022-11-23T18:55:40ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 43[.]138[.]44[.]205:9999

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]139[.]56:80

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]224[.]202[.]28:443

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 69b02f689b95041212c9ebda97a12c3d

November 24, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 69b02f689b95041212c9ebda97a12c3dSHA1: 5c10789d160650dbe5304c9b64d7567d7f191d18ANALYSIS DATE: 2022-11-23T19:01:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 47d86bed6f9d6fe9263920d5fde8dd20

November 24, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 47d86bed6f9d6fe9263920d5fde8dd20SHA1: adc84eaa0b6eaa06c33082af0cf645324a750b28ANALYSIS DATE: 2022-11-23T19:01:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 164903ecc03a2744f45b4bb7f0b65770

November 24, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 164903ecc03a2744f45b4bb7f0b65770SHA1: b52659af39bd470a6889b1065857872e04cfbd15ANALYSIS DATE: 2022-11-23T19:01:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 0d93e4a1b0881cc9f07db871f1564758

November 24, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0d93e4a1b0881cc9f07db871f1564758SHA1: 2c0ac57e8a37a5eb8820adec7a8f11a07488bd75ANALYSIS DATE: 2022-11-23T19:05:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 118[.]195[.]163[.]162:80

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 82[.]156[.]187[.]92:8443

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 141[.]98[.]82[.]243:80

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 161[.]35[.]115[.]28:80

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 8aafe420b4e2d00e1f85a0374787a0e1

November 24, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8aafe420b4e2d00e1f85a0374787a0e1SHA1: 283579190345db13963c73ba48467a6306840547ANALYSIS DATE: 2022-11-23T19:12:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 4e66f4af565563d95fe443d36dca93a0

November 24, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, upxMD5: 4e66f4af565563d95fe443d36dca93a0SHA1: 81ea30f87ae9e096e8bafeab1affbd5e1c0ba51fANALYSIS DATE: 2022-11-23T19:06:20ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – a2716bd9f4f7f0ffa5b49881df348602

November 24, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a2716bd9f4f7f0ffa5b49881df348602SHA1: 04a49bd555bb591fe7b9d9ea3b3e08494aecdf42ANALYSIS DATE: 2022-11-23T19:05:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – ca680d9f26a0e5e9a4c2294c488bf46b

November 24, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ca680d9f26a0e5e9a4c2294c488bf46bSHA1: f129f6c0e1ef884a6e1ac1b4e526d34ed8f02c37ANALYSIS DATE: 2022-11-23T19:21:43ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 149[.]248[.]20[.]183:443

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]182[.]211[.]71:80

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]173[.]19[.]149:8001

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]37[.]185:443

November 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – 6fb99593905840cf95ab2364c4c87d63

November 24, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 6fb99593905840cf95ab2364c4c87d63SHA1: 8d0aafee1cabe7b6cc0caf93ffafd3da3bff8b9bANALYSIS DATE: 2022-11-23T20:48:15ZTTPS: T1082, T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 33cf9aac2e4768e8c9e10aeb8f6a9ad6

November 24, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 33cf9aac2e4768e8c9e10aeb8f6a9ad6SHA1: 8c0ba6cafeb8b38a964bc178b96233af7e89f5e7ANALYSIS DATE: 2022-11-23T19:22:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – 444072ec68d9dad8de5f9060c74e3b90

November 24, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 444072ec68d9dad8de5f9060c74e3b90SHA1: f3845470366d4ce52a18492f279e3a89ef25e485ANALYSIS DATE: 2022-11-23T19:53:54ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Month: November 2022

Malware Analysis – ransomware – 18eefa61b11d2f37dbd389c0d46004b6

Malware Analysis – ransomware – dd8411270ae082c092f9c7f5cb368d84

Cobalt Stike Beacon Detected – 43[.]138[.]44[.]205:9999

Cobalt Stike Beacon Detected – 43[.]139[.]139[.]56:80

Cobalt Stike Beacon Detected – 139[.]224[.]202[.]28:443

Malware Analysis – ransomware – 69b02f689b95041212c9ebda97a12c3d

Malware Analysis – ransomware – 47d86bed6f9d6fe9263920d5fde8dd20

Malware Analysis – ransomware – 164903ecc03a2744f45b4bb7f0b65770

Malware Analysis – ransomware – 0d93e4a1b0881cc9f07db871f1564758

Cobalt Stike Beacon Detected – 118[.]195[.]163[.]162:80

Cobalt Stike Beacon Detected – 82[.]156[.]187[.]92:8443

Cobalt Stike Beacon Detected – 141[.]98[.]82[.]243:80

Cobalt Stike Beacon Detected – 161[.]35[.]115[.]28:80

Malware Analysis – ransomware – 8aafe420b4e2d00e1f85a0374787a0e1

Malware Analysis – evasion – 4e66f4af565563d95fe443d36dca93a0

Malware Analysis – ransomware – a2716bd9f4f7f0ffa5b49881df348602

Malware Analysis – – ca680d9f26a0e5e9a4c2294c488bf46b

Cobalt Stike Beacon Detected – 149[.]248[.]20[.]183:443

Cobalt Stike Beacon Detected – 5[.]182[.]211[.]71:80

Cobalt Stike Beacon Detected – 107[.]173[.]19[.]149:8001

Cobalt Stike Beacon Detected – 43[.]138[.]37[.]185:443

Malware Analysis – evasion – 6fb99593905840cf95ab2364c4c87d63

Malware Analysis – evasion – 33cf9aac2e4768e8c9e10aeb8f6a9ad6

Malware Analysis – – 444072ec68d9dad8de5f9060c74e3b90

[QILIN] – Ransomware Victim: DieTech North America

CISA: Avoid Scams After Disaster Strikes

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: CISA and FBI Release Fact Sheet on Protecting Against Iranian Targeting of Accounts Associated with National Political Organizations

CISA: Microsoft Releases October 2024 Security Updates

You may have missed