Month: November 2022

Malware Analysis – evasion – 7c063969193e6ac70cefd68ceb97f8f0

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 7c063969193e6ac70cefd68ceb97f8f0SHA1: edbc2ec880785afbce4f35d3bd0bc1f9123b8bd8ANALYSIS DATE: 2022-11-28T16:22:37ZTTPS: T1107, T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – – 51ed7e8e341c08280b7a0217f7c39a3f

November 30, 2022

Score: 5 MALWARE FAMILY: TAGS:MD5: 51ed7e8e341c08280b7a0217f7c39a3fSHA1: 079ad2df4a1db02c4170b7d44aaa189f16194fa1ANALYSIS DATE: 2022-11-28T16:22:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ctblocker – f24e6374518fa7aed3d24a064a03bd23

November 30, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: f24e6374518fa7aed3d24a064a03bd23SHA1: d0ffebdb6e5f97c2842d5578f889345b88224d5cANALYSIS DATE: 2022-11-28T16:22:46ZTTPS: T1082, T1107, T1490, T1012, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ctblocker – 9cd4cebf8b04cd6864b59e4c0cf4aafa

November 30, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: 9cd4cebf8b04cd6864b59e4c0cf4aafaSHA1: 2287faa3026c5981f3796268112998ac1c06c5d3ANALYSIS DATE: 2022-11-28T16:22:48ZTTPS: T1107, T1490, T1012, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ctblocker – 284b37c4771f4dcf91a37348014e04ff

November 30, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: 284b37c4771f4dcf91a37348014e04ffSHA1: 211e5aa4cc0451aa252660576fc5c6a1961667fdANALYSIS DATE: 2022-11-28T16:22:51ZTTPS: T1082, T1112, T1107, T1490, T1491, T1012 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ctblocker – 53efb689f9f56262b571f68b11a21839

November 30, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: 53efb689f9f56262b571f68b11a21839SHA1: 0d31c13c910cbb2dd2979a3762a9223aa12eceeeANALYSIS DATE: 2022-11-28T16:22:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – af7f30b98c732f91bfbad156cf2fb04c

November 30, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: af7f30b98c732f91bfbad156cf2fb04cSHA1: 770fd8640bd3f0d4c107978552ab78d151ea4b51ANALYSIS DATE: 2022-11-28T16:24:26ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – a6ccdc333a505d022f1349a9427d26a8

November 30, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a6ccdc333a505d022f1349a9427d26a8SHA1: 40f4687c484957ee130490587f1e1791cab25dc6ANALYSIS DATE: 2022-11-28T16:24:03ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 1ee024007823cc0bfbefba98ba1e1f4c

November 30, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 1ee024007823cc0bfbefba98ba1e1f4cSHA1: efa485e611e8997e53d560ffac67d1117db1c459ANALYSIS DATE: 2022-11-28T16:24:28ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ctblocker – 102c9d8d99c9f453053d1f49620df11f

November 30, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: 102c9d8d99c9f453053d1f49620df11fSHA1: 47ab2f2f660832e3a38f6dee882431a5a2404729ANALYSIS DATE: 2022-11-28T16:24:40ZTTPS: T1107, T1490, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 7d63af3bc3bcf67c0467a136f29ff245

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 7d63af3bc3bcf67c0467a136f29ff245SHA1: d6b72b32c8d9709e7499dfa6f50765030900ac26ANALYSIS DATE: 2022-11-28T16:24:42ZTTPS: T1107, T1490, T1112, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 53f7cd1bbe61d32ff9368d39efcd8cea

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 53f7cd1bbe61d32ff9368d39efcd8ceaSHA1: 597ffcc050192a3aa8e48fb59f97d4a332164529ANALYSIS DATE: 2022-11-28T16:24:36ZTTPS: T1060, T1112, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 58b665b48142c0393c37b1670a6a8219

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 58b665b48142c0393c37b1670a6a8219SHA1: 4fe552a6e78df10406c25c926c862c9101716a04ANALYSIS DATE: 2022-11-28T16:24:34ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 3fe889b5b2eff8f124317ee49d65d308

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 3fe889b5b2eff8f124317ee49d65d308SHA1: e1f380e3c8ad73c63037e78f8e114c31606f8b74ANALYSIS DATE: 2022-11-28T16:25:03ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 6d9472c60fb95b14bbf90978d0502217

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 6d9472c60fb95b14bbf90978d0502217SHA1: bd9d0cc75c5726c21423975df0d54abea4db9694ANALYSIS DATE: 2022-11-28T16:25:05ZTTPS: T1112, T1107, T1490, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – aaf64a5bd9446314cbd37b05bef5e84d

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: aaf64a5bd9446314cbd37b05bef5e84dSHA1: 4014eb5b41292bd6cb895f15a423052a05303c81ANALYSIS DATE: 2022-11-28T16:25:00ZTTPS: T1112, T1107, T1490, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – fd6dd1be61713fd5c0ddb78288c49bcf

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: fd6dd1be61713fd5c0ddb78288c49bcfSHA1: a88ea1443036821305b5229276fe815beb54b810ANALYSIS DATE: 2022-11-28T16:25:10ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 3[.]65[.]42[.]215:443

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]48[.]81[.]134:443

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – 3a19d13b39f329aafd9cf7e0b51c563c

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 3a19d13b39f329aafd9cf7e0b51c563cSHA1: b5a123254a544d4fb93a9cfb77b3cdf784491a68ANALYSIS DATE: 2022-11-28T16:36:08ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 8161f767ecddd356ecab740de272f0d7

November 30, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 8161f767ecddd356ecab740de272f0d7SHA1: 7c2b6a4ba08e3ec1313a889455ba2a32f64797b6ANALYSIS DATE: 2022-11-28T16:30:30ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – e094ae1a0e6c03fc4038fdd484349be7

November 30, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e094ae1a0e6c03fc4038fdd484349be7SHA1: 917b776ce2429cee8ee4ad837d9952906cb82127ANALYSIS DATE: 2022-11-28T16:30:46ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 9c3901f10998c40021f36d407a87c31a

November 30, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 9c3901f10998c40021f36d407a87c31aSHA1: b4f433c15c722bd9485d609bf5d93790369ad853ANALYSIS DATE: 2022-11-28T16:32:38ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Cobalt Stike Beacon Detected – 81[.]69[.]30[.]152:8012

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Month: November 2022

Malware Analysis – evasion – 7c063969193e6ac70cefd68ceb97f8f0

Malware Analysis – – 51ed7e8e341c08280b7a0217f7c39a3f

Malware Analysis – ctblocker – f24e6374518fa7aed3d24a064a03bd23

Malware Analysis – ctblocker – 9cd4cebf8b04cd6864b59e4c0cf4aafa

Malware Analysis – ctblocker – 284b37c4771f4dcf91a37348014e04ff

Malware Analysis – ctblocker – 53efb689f9f56262b571f68b11a21839

Malware Analysis – persistence – af7f30b98c732f91bfbad156cf2fb04c

Malware Analysis – persistence – a6ccdc333a505d022f1349a9427d26a8

Malware Analysis – persistence – 1ee024007823cc0bfbefba98ba1e1f4c

Malware Analysis – ctblocker – 102c9d8d99c9f453053d1f49620df11f

Malware Analysis – evasion – 7d63af3bc3bcf67c0467a136f29ff245

Malware Analysis – evasion – 53f7cd1bbe61d32ff9368d39efcd8cea

Malware Analysis – evasion – 58b665b48142c0393c37b1670a6a8219

Malware Analysis – evasion – 3fe889b5b2eff8f124317ee49d65d308

Malware Analysis – evasion – 6d9472c60fb95b14bbf90978d0502217

Malware Analysis – evasion – aaf64a5bd9446314cbd37b05bef5e84d

Malware Analysis – evasion – fd6dd1be61713fd5c0ddb78288c49bcf

Cobalt Stike Beacon Detected – 3[.]65[.]42[.]215:443

Cobalt Stike Beacon Detected – 120[.]48[.]81[.]134:443

Malware Analysis – evasion – 3a19d13b39f329aafd9cf7e0b51c563c

Malware Analysis – persistence – 8161f767ecddd356ecab740de272f0d7

Malware Analysis – persistence – e094ae1a0e6c03fc4038fdd484349be7

Malware Analysis – discovery – 9c3901f10998c40021f36d407a87c31a

Cobalt Stike Beacon Detected – 81[.]69[.]30[.]152:8012

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: Foreign Threat Actor Conducting Large-Scale Spear-Phishing Campaign with RDP Attachments

You may have missed