Year: 2022

Malware Analysis – evasion – 02007f0af83d28ca54bb8e74acfb3577

October 30, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 02007f0af83d28ca54bb8e74acfb3577SHA1: 0a1fabc1ff3d6a5697f58c0dec93939790dbd671ANALYSIS DATE: 2022-10-29T15:25:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 6d1a7cc370fc636b1a638c4b05eb00df

October 30, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6d1a7cc370fc636b1a638c4b05eb00dfSHA1: d920614d4f2344593183476a37b686559d588100ANALYSIS DATE: 2022-10-29T15:10:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 5bf8357e10b0612263d5c6076f398696

October 30, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 5bf8357e10b0612263d5c6076f398696SHA1: 54a40fb8c3bd659886b75acc71ec84a2b87bd0f7ANALYSIS DATE: 2022-10-29T15:48:27ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ctblocker – 1ea130f39d90ae08b289a13406410ec3

October 30, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: 1ea130f39d90ae08b289a13406410ec3SHA1: f87fcf3b7becd3ada883a42f79e05943abb21c09ANALYSIS DATE: 2022-10-29T15:41:00ZTTPS: T1491, T1112, T1082, T1107, T1490, T1012 ScoreMeaningExample10Known badA malware family...

Malware Analysis – infostealer – cbaa738a6160ccc140be1ff70480dd0a

October 30, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: cbaa738a6160ccc140be1ff70480dd0aSHA1: 0869cc449351fb3d911191b447969cfb45d179e4ANALYSIS DATE: 2022-10-29T15:33:42ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – xorist – 0dcdb939e8524ce89fdfb91a2e675e93

October 30, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealerMD5: 0dcdb939e8524ce89fdfb91a2e675e93SHA1: a68934aed2b0a430dab8f7ef3a960218faebe583ANALYSIS DATE: 2022-10-29T15:51:06ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 103[.]150[.]173[.]228:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]173[.]70[.]169:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]225[.]154[.]203:80

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ctblocker – 95f60b5b36d63307d83e3f3de9675a1d

October 30, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: 95f60b5b36d63307d83e3f3de9675a1dSHA1: da733991d9618b3a3bb5cc503ba0e860f1e8ea29ANALYSIS DATE: 2022-10-29T15:55:01ZTTPS: T1082, T1107, T1490, T1491, T1112, T1012 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – 07b9898ff9ae398d6d43e898cafc87bd

October 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 07b9898ff9ae398d6d43e898cafc87bdSHA1: 387eb977a49b10c3c245f2a8ccdd401af83c00b4ANALYSIS DATE: 2022-10-29T15:57:14ZTTPS: T1107, T1490, T1112, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – ac632aeca091d4ac3ac0cf160f787032

October 30, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: ac632aeca091d4ac3ac0cf160f787032SHA1: 0c9f8c9ca978cdec4781b60b4e941e44bd5c8bdcANALYSIS DATE: 2022-10-29T20:20:27ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – ed8723ee64b277fd0f60732895c087d8

October 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: ed8723ee64b277fd0f60732895c087d8SHA1: 34fcea43abfe51973953bd64792fe21e593aca05ANALYSIS DATE: 2022-10-29T15:57:11ZTTPS: T1107, T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 124[.]221[.]252[.]231:80

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]135[.]101[.]182:8443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]222[.]181[.]79:7777

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]91:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – e03466a56b1cbd1ab65949e82c1e8a05

October 30, 2022

Score: 10 MALWARE FAMILY: TAGS:MD5: e03466a56b1cbd1ab65949e82c1e8a05SHA1: 159c6917dd528df56ef0c4f41d06d2f567e54b3fANALYSIS DATE: 2022-10-29T21:48:44ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 3d5811564acf2f7726833cd0f0f3e82c

October 30, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 3d5811564acf2f7726833cd0f0f3e82cSHA1: d7cebf3154d488de7483b3ed19a115eeb5f02896ANALYSIS DATE: 2022-10-29T21:23:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 8ff45c762ee4259f7bc2fc2e2372283a

October 30, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8ff45c762ee4259f7bc2fc2e2372283aSHA1: 6fc6037833b71e67e8c229514b9cea589ca2cc8bANALYSIS DATE: 2022-10-29T20:56:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 457bbbee8fb7b64a5824d80ff19b7092

October 30, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 457bbbee8fb7b64a5824d80ff19b7092SHA1: d976cec45ae1605dde841e9b47dac57f78e7b725ANALYSIS DATE: 2022-10-29T21:31:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Year: 2022

Malware Analysis – evasion – 02007f0af83d28ca54bb8e74acfb3577

Malware Analysis – ransomware – 6d1a7cc370fc636b1a638c4b05eb00df

Malware Analysis – discovery – 5bf8357e10b0612263d5c6076f398696

Malware Analysis – ctblocker – 1ea130f39d90ae08b289a13406410ec3

Malware Analysis – infostealer – cbaa738a6160ccc140be1ff70480dd0a

Malware Analysis – xorist – 0dcdb939e8524ce89fdfb91a2e675e93

Cobalt Stike Beacon Detected – 103[.]150[.]173[.]228:443

Cobalt Stike Beacon Detected – 107[.]173[.]70[.]169:443

Cobalt Stike Beacon Detected – 104[.]225[.]154[.]203:80

Malware Analysis – ctblocker – 95f60b5b36d63307d83e3f3de9675a1d

Malware Analysis – evasion – 07b9898ff9ae398d6d43e898cafc87bd

Malware Analysis – wannacry – ac632aeca091d4ac3ac0cf160f787032

Malware Analysis – evasion – ed8723ee64b277fd0f60732895c087d8

Cobalt Stike Beacon Detected – 124[.]221[.]252[.]231:80

Cobalt Stike Beacon Detected – 103[.]135[.]101[.]182:8443

Cobalt Stike Beacon Detected – 124[.]222[.]181[.]79:7777

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]91:443

Malware Analysis – – e03466a56b1cbd1ab65949e82c1e8a05

Malware Analysis – evasion – 3d5811564acf2f7726833cd0f0f3e82c

Malware Analysis – smokeloader – 8ff45c762ee4259f7bc2fc2e2372283a

Malware Analysis – evasion – 457bbbee8fb7b64a5824d80ff19b7092

Cobalt Stike Beacon Detected – 106[.]55[.]2[.]194:4545

Cobalt Stike Beacon Detected – 119[.]29[.]82[.]40:443

Cobalt Stike Beacon Detected – 18[.]191[.]177[.]87:443

Cobalt Strike Beacon Detected – 154[.]223[.]21[.]105:443

Cobalt Strike Beacon Detected – 43[.]143[.]48[.]234:8082

Cobalt Strike Beacon Detected – 1[.]92[.]139[.]71:4444

CovenantC2 Detected – 20[.]8[.]18[.]90:7443

CVE Alert: CVE-2025-0583

You may have missed