Month: March 2023

Malware Analysis – – c7830b18b8d78a56a9e936d0972f63a3

March 10, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: c7830b18b8d78a56a9e936d0972f63a3SHA1: dd06befb69ca7c8c7908ec452eb3ab52aa9f9856ANALYSIS DATE: 2023-03-10T03:43:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – f30bde6d0a2e5e74772892751f9eb26d

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: f30bde6d0a2e5e74772892751f9eb26dSHA1: 493c39cbfb9d2e814efd5f25e2fc3aa675bceb46ANALYSIS DATE: 2023-03-10T04:19:56ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – spyware – 0bd2a86516a4ebcc88f37f77dc618a0b

March 10, 2023

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 0bd2a86516a4ebcc88f37f77dc618a0bSHA1: 2da8e9f1ce74cfc6a3a7f70742d37829fa23ee9cANALYSIS DATE: 2023-03-10T04:33:56ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – phobos – 4230714977f5c09548b175207a2dd19f

March 10, 2023

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 4230714977f5c09548b175207a2dd19fSHA1: 128188058d5ade9d2f89861795b994acc68efe0cANALYSIS DATE: 2023-03-10T05:00:08ZTTPS: T1490, T1059, T1107, T1012, T1112, T1060,...

Malware Analysis – persistence – 2aea3b217e6a3d08ef684594192cafc8

March 10, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 2aea3b217e6a3d08ef684594192cafc8SHA1: 3a0b855dd052b2cdc6453f6cbdb858c7b55762b0ANALYSIS DATE: 2023-03-10T04:36:04ZTTPS: T1491, T1112, T1060, T1005, T1081, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 5deead341cb4f213fc96597f701966e8

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 5deead341cb4f213fc96597f701966e8SHA1: a032a5cc3dbb39f91dc63e852e570a575dd456cdANALYSIS DATE: 2023-03-10T04:40:29ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – ouroboros – 634e4f4cac8f492e1938d4fe3013ad3c

March 10, 2023

Score: 10 MALWARE FAMILY: ouroborosTAGS:family:ouroboros, evasion, ransomware, upxMD5: 634e4f4cac8f492e1938d4fe3013ad3cSHA1: cc008a1bb769a5d36e574850bce4a534bd3f081fANALYSIS DATE: 2023-03-10T04:46:03ZTTPS: T1031, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7413f53837aea773489c0ce2473f75f0

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, persistence, ransomware, stealer, trojanMD5: 7413f53837aea773489c0ce2473f75f0SHA1: e4bd54bf75505c2b76e404ac1fcbe0522225351bANALYSIS...

Malware Analysis – djvu – 2d3f4436dd713701845cce37e8f1b84f

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 2d3f4436dd713701845cce37e8f1b84fSHA1: 75859accc07065cc061492fcf04d56582f726e99ANALYSIS DATE: 2023-03-10T05:52:53ZTTPS: T1082, T1222, T1053, T1005,...

Malware Analysis – ransomware – 1b4dc652f933a8591ee711f82c8e541f

March 10, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1b4dc652f933a8591ee711f82c8e541fSHA1: f0ddbd0610758063ec7d83eb33b3714f4be5464bANALYSIS DATE: 2023-03-10T05:05:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – fabd3e5b6456bf0e78a1b12fdee59a62

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: fabd3e5b6456bf0e78a1b12fdee59a62SHA1: d0121c9df6f995427672898bfb9003f1a4504791ANALYSIS DATE: 2023-03-10T05:57:45ZTTPS: T1060, T1112, T1082, T1005,...

LockBit 3.0 Ransomware Victim: pmsoffice[.]de

March 10, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 106[.]55[.]226[.]8:88

March 10, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 39[.]102[.]32[.]121:8088

March 10, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]188[.]86[.]194:81

March 10, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 152[.]89[.]196[.]245:6789

March 10, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 9d06217fba3f3141cb7fc1a813e3dff8

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 9d06217fba3f3141cb7fc1a813e3dff8SHA1: 36bbc02a0dedc4d1b90186b62ac30d8d331b6a96ANALYSIS DATE: 2023-03-09T22:25:25ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – smokeloader – 4eb141e24bae15180d68bc22e040954a

March 10, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4eb141e24bae15180d68bc22e040954aSHA1: 7621310b600b39c7e9700fbca56c15938c80e589ANALYSIS DATE: 2023-03-09T22:33:01ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 88108be37dd6fe70039ce07fe7d4084d

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 88108be37dd6fe70039ce07fe7d4084dSHA1: ef2acad1f1bcd0ec59859ec29a77d363f22269a2ANALYSIS DATE: 2023-03-09T21:27:35ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – ransomware – bc4e211d38d2d1f81c84b0aad4b73e72

March 10, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: bc4e211d38d2d1f81c84b0aad4b73e72SHA1: da1ecd02618b67cf061e3992c42144197762331bANALYSIS DATE: 2023-03-09T22:01:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 59c6512670c56bced3f3993bdd800d4a

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 59c6512670c56bced3f3993bdd800d4aSHA1: 5ac42a6365b594fca5210b37b64525cf6764832bANALYSIS DATE: 2023-03-09T23:21:08ZTTPS: T1053, T1005, T1081, T1082,...

Malware Analysis – royal – 01492156ce8b4034c5b1027130f4cf4e

March 10, 2023

Score: 10 MALWARE FAMILY: royalTAGS:family:royal, ransomwareMD5: 01492156ce8b4034c5b1027130f4cf4eSHA1: 6b0deb67a178fe20e81691133b257df3bafa3006ANALYSIS DATE: 2023-03-09T23:07:03ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – royal – df0b88dafe7a65295f99e69a67db9e1b

March 10, 2023

Score: 10 MALWARE FAMILY: royalTAGS:family:royal, ransomwareMD5: df0b88dafe7a65295f99e69a67db9e1bSHA1: db3163a09eb33ff4370ad162a05f4b2584a20456ANALYSIS DATE: 2023-03-09T23:09:03ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – ba804eaa0d768e204dfc2acb4bf9ceba

March 10, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: ba804eaa0d768e204dfc2acb4bf9cebaSHA1: 0738f2cc2750d7251bbe1919eb354d9432b052b1ANALYSIS DATE: 2023-03-09T23:22:57ZTTPS: T1107, T1490, T1082, T1031, T1562, T1489, T1089, T1112, T1491...

Month: March 2023

Malware Analysis – – c7830b18b8d78a56a9e936d0972f63a3

Malware Analysis – djvu – f30bde6d0a2e5e74772892751f9eb26d

Malware Analysis – spyware – 0bd2a86516a4ebcc88f37f77dc618a0b

Malware Analysis – phobos – 4230714977f5c09548b175207a2dd19f

Malware Analysis – persistence – 2aea3b217e6a3d08ef684594192cafc8

Malware Analysis – djvu – 5deead341cb4f213fc96597f701966e8

Malware Analysis – ouroboros – 634e4f4cac8f492e1938d4fe3013ad3c

Malware Analysis – djvu – 7413f53837aea773489c0ce2473f75f0

Malware Analysis – djvu – 2d3f4436dd713701845cce37e8f1b84f

Malware Analysis – ransomware – 1b4dc652f933a8591ee711f82c8e541f

Malware Analysis – djvu – fabd3e5b6456bf0e78a1b12fdee59a62

LockBit 3.0 Ransomware Victim: pmsoffice[.]de

Cobalt Stike Beacon Detected – 106[.]55[.]226[.]8:88

Cobalt Stike Beacon Detected – 39[.]102[.]32[.]121:8088

Cobalt Stike Beacon Detected – 5[.]188[.]86[.]194:81

Cobalt Stike Beacon Detected – 152[.]89[.]196[.]245:6789

Malware Analysis – djvu – 9d06217fba3f3141cb7fc1a813e3dff8

Malware Analysis – smokeloader – 4eb141e24bae15180d68bc22e040954a

Malware Analysis – djvu – 88108be37dd6fe70039ce07fe7d4084d

Malware Analysis – ransomware – bc4e211d38d2d1f81c84b0aad4b73e72

Malware Analysis – djvu – 59c6512670c56bced3f3993bdd800d4a

Malware Analysis – royal – 01492156ce8b4034c5b1027130f4cf4e

Malware Analysis – royal – df0b88dafe7a65295f99e69a67db9e1b

Malware Analysis – evasion – ba804eaa0d768e204dfc2acb4bf9ceba

[RAWORLD] – Ransomware Victim: Co****nt

[KILLSEC] – Ransomware Victim: inv[[.][.][.]]nator

[KILLSEC] – Ransomware Victim: Ithbar

[KILLSEC] – Ransomware Victim: RiverRestHome

[KILLSEC] – Ransomware Victim: Dardoc

You may have missed