OSINT

Malware Analysis – smokeloader – e2877d46f4d7f96d20ae5913afff60ae

October 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e2877d46f4d7f96d20ae5913afff60aeSHA1: 66746e6642dcd7a910466e141b3e869c9c9be362ANALYSIS DATE: 2022-10-26T20:59:47ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – f685cd39636a0862009737be04556cce

October 27, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: f685cd39636a0862009737be04556cceSHA1: 886aeae78c659952c0862d323da361c28761d711ANALYSIS DATE: 2022-10-26T22:13:49ZTTPS: T1012, T1082, T1057 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – 61878d186ed8e369f6122847aac6927c

October 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 61878d186ed8e369f6122847aac6927cSHA1: 011cbc8c2b04e0fe73d9cfa06869099b0ccc1d9eANALYSIS DATE: 2022-10-26T21:46:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 9cb5b0bec4a9172fe2299ebb0cc2be86

October 27, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 9cb5b0bec4a9172fe2299ebb0cc2be86SHA1: 8f5691556fbac1a36b99796b9d4e1683781c15a6ANALYSIS DATE: 2022-10-26T20:57:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 198[.]44[.]140[.]97:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]190[.]72:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]232[.]146:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]62:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – cryptolocker – bc11c93f1b6dc74bf4804a35b34d9267

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: bc11c93f1b6dc74bf4804a35b34d9267SHA1: a18c25ed1282f56225d21c6460ffaaf16ae0d965ANALYSIS DATE: 2022-10-26T22:28:39ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – cryptolocker – 354f7ec15741db7fcdfe7b158c14dfaa

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: 354f7ec15741db7fcdfe7b158c14dfaaSHA1: 1265f62cb1bf781baaf5161e8b2fcd40a4026747ANALYSIS DATE: 2022-10-26T22:28:37ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 61386a35e3e0f1d1cc0b70d571cfb26e

October 27, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 61386a35e3e0f1d1cc0b70d571cfb26eSHA1: 6433c046bf0ad139e43199f58c5115538d3ff66bANALYSIS DATE: 2022-10-26T22:28:38ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – cryptolocker – fec5a0d4dea87955c124f2eaa1f759f5

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: fec5a0d4dea87955c124f2eaa1f759f5SHA1: ea2e50e16448ac8131391e5322663660ef0a5632ANALYSIS DATE: 2022-10-26T22:28:35ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 195[.]14[.]122[.]172:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 167[.]99[.]116[.]140:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]27:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]221[.]127[.]219:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – cryptolocker – 7f3cc059ffc6c11fe42695e5f19553ab

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: 7f3cc059ffc6c11fe42695e5f19553abSHA1: f22555d2898e3486b2c628a2e523657f5fbbe475ANALYSIS DATE: 2022-10-26T22:28:41ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – cryptolocker – 3921543c211364b4827c55aeeef5260c

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: 3921543c211364b4827c55aeeef5260cSHA1: 4b7f71b8e7f228dbb0d296120b6f6f455d22248cANALYSIS DATE: 2022-10-26T22:28:43ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – 9c7e4e17df4b373ef137d1611e0f902c

October 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojan, upxMD5: 9c7e4e17df4b373ef137d1611e0f902cSHA1: 84392abdf2f3fd70aac778d6c248786514de64caANALYSIS DATE: 2022-10-26T22:28:58ZTTPS: T1082, T1060, T1112, T1089, T1004, T1088,...

Malware Analysis – cryptolocker – ffeae4a391a1d5203bd04b4161557227

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: ffeae4a391a1d5203bd04b4161557227SHA1: 7c7013dd8def75c94828b40ffa139b6d89ec4683ANALYSIS DATE: 2022-10-26T22:28:41ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

OSINT

Malware Analysis – smokeloader – e2877d46f4d7f96d20ae5913afff60ae

Malware Analysis – discovery – f685cd39636a0862009737be04556cce

Malware Analysis – smokeloader – 61878d186ed8e369f6122847aac6927c

Malware Analysis – – 9cb5b0bec4a9172fe2299ebb0cc2be86

Cobalt Stike Beacon Detected – 198[.]44[.]140[.]97:443

Cobalt Stike Beacon Detected – 84[.]32[.]190[.]72:443

Cobalt Stike Beacon Detected – 81[.]68[.]232[.]146:80

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]62:443

Malware Analysis – cryptolocker – bc11c93f1b6dc74bf4804a35b34d9267

Malware Analysis – cryptolocker – 354f7ec15741db7fcdfe7b158c14dfaa

Malware Analysis – ransomware – 61386a35e3e0f1d1cc0b70d571cfb26e

Malware Analysis – cryptolocker – fec5a0d4dea87955c124f2eaa1f759f5

Cobalt Stike Beacon Detected – 195[.]14[.]122[.]172:443

Cobalt Stike Beacon Detected – 167[.]99[.]116[.]140:80

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]27:80

Cobalt Stike Beacon Detected – 124[.]221[.]127[.]219:80

Malware Analysis – cryptolocker – 7f3cc059ffc6c11fe42695e5f19553ab

Malware Analysis – cryptolocker – 3921543c211364b4827c55aeeef5260c

Malware Analysis – evasion – 9c7e4e17df4b373ef137d1611e0f902c

Malware Analysis – cryptolocker – ffeae4a391a1d5203bd04b4161557227

Cobalt Stike Beacon Detected – 155[.]94[.]133[.]243:8080

Cobalt Stike Beacon Detected – 116[.]203[.]17[.]128:80

Cobalt Stike Beacon Detected – 139[.]224[.]116[.]32:1000

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]17:443

Google Chrome Multiple Vulnerabilities

Cobalt Strike Beacon Detected – 124[.]221[.]116[.]169:80

Cobalt Strike Beacon Detected – 196[.]251[.]87[.]191:4433

Cobalt Strike Beacon Detected – 179[.]43[.]186[.]243:80

Cobalt Strike Beacon Detected – 118[.]25[.]91[.]151:80

You may have missed