Security

Malware Analysis – djvu – 6513626f59c47a89ba4271b478b5034d

December 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6513626f59c47a89ba4271b478b5034dSHA1: 22d8570da5321ba2f6d6eb12f1c23a0878dfc593ANALYSIS DATE: 2022-12-27T17:50:51ZTTPS: T1060, T1112, T1082, T1053, T1005, T1081,...

Malware Analysis – discovery – b91868decda0959a07f20d69a800d786

December 27, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: b91868decda0959a07f20d69a800d786SHA1: 71864ca3a0805cb4f937e5a597cebd7563557890ANALYSIS DATE: 2022-12-27T17:30:48ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – 876bb144464baf4cfc0a89c015e61e8f

December 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 876bb144464baf4cfc0a89c015e61e8fSHA1: 99437ed2a0c3c2d7b6ca27c30ee6b3ae4c8e6f24ANALYSIS DATE: 2022-12-27T17:32:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 6f84511085f94b11046f1cea1966e4f6

December 27, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6f84511085f94b11046f1cea1966e4f6SHA1: aab2e0cf75ad96a70b64b5035c213c91d24e7cf3ANALYSIS DATE: 2022-12-27T17:44:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 2fe04a3e7d0bcb135c052cedc36828c6

December 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 2fe04a3e7d0bcb135c052cedc36828c6SHA1: de5f7733b95e29eca6349a4c6b29c3f5127ca91dANALYSIS DATE: 2022-12-27T10:38:37ZTTPS: T1060, T1112, T1222, T1082, T1012, T1005,...

Malware Analysis – amadey – dad53ce21dcc7eae267e81ee7b7367af

December 27, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: dad53ce21dcc7eae267e81ee7b7367afSHA1: 9b0eabc43e78c74e527a373206c5257d7c537064ANALYSIS DATE: 2022-12-27T09:42:41ZTTPS:...

Malware Analysis – amadey – a56d3c79f4cb08aec0b6369f2f0d3c0c

December 27, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: a56d3c79f4cb08aec0b6369f2f0d3c0cSHA1: fb1c5685084544fa57aa8e3f2622aeedd8f780f8ANALYSIS DATE: 2022-12-27T10:32:44ZTTPS:...

Malware Analysis – evasion – 666dd728a10e4abeffdf56f50de9b420

December 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 666dd728a10e4abeffdf56f50de9b420SHA1: b6b8e884445e684df12f5ebb748a6ff3fc707a6cANALYSIS DATE: 2022-12-27T10:51:15ZTTPS: T1107, T1490, T1060, T1112, T1031, T1562, T1489, T1082 ScoreMeaningExample10Known...

Malware Analysis – ransomware – 99109eb335db668094278d1953aff94f

December 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 99109eb335db668094278d1953aff94fSHA1: b6dd1bc3b9ff8522d97945e2c19d0a2ea9651cf7ANALYSIS DATE: 2022-12-27T10:51:11ZTTPS: T1107, T1490, T1082, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – matrix – 1c73c307773fedfccd544a6b6b0b55b9

December 27, 2022

Score: 10 MALWARE FAMILY: matrixTAGS:family:matrix, discovery, evasion, persistence, ransomware, spyware, stealer, upxMD5: 1c73c307773fedfccd544a6b6b0b55b9SHA1: 899ffd934e0b8a6df4b115c49df33fca524e2135ANALYSIS DATE: 2022-12-27T10:51:17ZTTPS: T1490, T1053, T1012, T1120,...

Malware Analysis – persistence – 9476b5f481090ea650cfc65e017dc41c

December 27, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 9476b5f481090ea650cfc65e017dc41cSHA1: 0fa937125a55c299a48d3e1485fee16646555087ANALYSIS DATE: 2022-12-27T10:51:13ZTTPS: T1082, T1112, T1005, T1081, T1060, T1107, T1490, T1130...

Malware Analysis – evasion – 16deea31a988e7af71001c2eda8ad614

December 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 16deea31a988e7af71001c2eda8ad614SHA1: 8d992884b713b56d1edbf40306b2e11dc54f9887ANALYSIS DATE: 2022-12-27T10:51:28ZTTPS: T1490, T1059, T1107, T1082, T1088, T1089, T1112, T1053,...

Malware Analysis – phobos – 377aa2486224f59074c39512f6d5bf08

December 27, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 377aa2486224f59074c39512f6d5bf08SHA1: 5a881b873f82e94634377b65b8126c603e4da7deANALYSIS DATE: 2022-12-27T10:51:20ZTTPS: T1490, T1059, T1107, T1031, T1005, T1081,...

Malware Analysis – phobos – b8d08e441562570f4bdca07a259da9a2

December 27, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: b8d08e441562570f4bdca07a259da9a2SHA1: 8025eac462e1b5d4a49496c700891b44c692e6b4ANALYSIS DATE: 2022-12-27T10:51:25ZTTPS: T1490, T1059, T1107, T1112, T1060, T1005,...

Malware Analysis – phobos – 78e7a770f7af0b3fa64fc324c391e288

December 27, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 78e7a770f7af0b3fa64fc324c391e288SHA1: 0506b7d989e2381fdb2122ef9d2ca6cd7ce7f132ANALYSIS DATE: 2022-12-27T10:51:22ZTTPS: T1490, T1059, T1107, T1060, T1112, T1031,...

Malware Analysis – ransomware – ddee92c23a182d69884422c1e8a3df1b

December 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ddee92c23a182d69884422c1e8a3df1bSHA1: d3c0510bf108a2a7c387c7edea77af7642222e56ANALYSIS DATE: 2022-12-27T10:51:41ZTTPS: T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – fa7229691c60464db93975f90ba1d566

December 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: fa7229691c60464db93975f90ba1d566SHA1: c47a7dfe28b036df7345f16251d3111b7042949bANALYSIS DATE: 2022-12-27T10:51:35ZTTPS: T1082, T1012, T1120, T1112, T1053, T1107, T1490, T1031, T1089,...

Malware Analysis – persistence – c60d51beca144f33e926955116c906b5

December 27, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: c60d51beca144f33e926955116c906b5SHA1: bbbbd5f55c09b1cbd568209e9515b516a718e8baANALYSIS DATE: 2022-12-27T10:51:40ZTTPS: T1082, T1012, T1120, T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 5c58ed8ef5fc167a8fe10ef53d5734c5

December 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5c58ed8ef5fc167a8fe10ef53d5734c5SHA1: e2b2fc4ee2111f2bde5afd7a5ab95783df9d653fANALYSIS DATE: 2022-12-27T10:51:33ZTTPS: T1107, T1490, T1082, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 94f8cfa9fded0b21d77b6f3dca1bfe47

December 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 94f8cfa9fded0b21d77b6f3dca1bfe47SHA1: 1d35a47e7742fd29f5c43d4338de39b3313b5e93ANALYSIS DATE: 2022-12-27T10:51:44ZTTPS: T1012, T1120, T1082, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – spyware – 63dbc6fe48f66d66214c2b6c93b60fbd

December 27, 2022

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 63dbc6fe48f66d66214c2b6c93b60fbdSHA1: 4f92db404aec1f3497dbc9d226eee3a318a0f972ANALYSIS DATE: 2022-12-27T11:49:50ZTTPS: T1012, T1082, T1102, T1005, T1081, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – – 78b7157812e786cc63eb362fa539271e

December 27, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 78b7157812e786cc63eb362fa539271eSHA1: bdb50db33ba6da8f4c40a4969712daa8f300e39cANALYSIS DATE: 2022-12-27T11:42:25ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 3eb587859a472ae910f2f21fbdd70db5

December 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3eb587859a472ae910f2f21fbdd70db5SHA1: bdcd11d43d4a288958db3bd1db1f216918eae5a5ANALYSIS DATE: 2022-12-27T11:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 35[.]201[.]225[.]182:80

December 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Security

Malware Analysis – djvu – 6513626f59c47a89ba4271b478b5034d

Malware Analysis – discovery – b91868decda0959a07f20d69a800d786

Malware Analysis – evasion – 876bb144464baf4cfc0a89c015e61e8f

Malware Analysis – ransomware – 6f84511085f94b11046f1cea1966e4f6

Malware Analysis – djvu – 2fe04a3e7d0bcb135c052cedc36828c6

Malware Analysis – amadey – dad53ce21dcc7eae267e81ee7b7367af

Malware Analysis – amadey – a56d3c79f4cb08aec0b6369f2f0d3c0c

Malware Analysis – evasion – 666dd728a10e4abeffdf56f50de9b420

Malware Analysis – ransomware – 99109eb335db668094278d1953aff94f

Malware Analysis – matrix – 1c73c307773fedfccd544a6b6b0b55b9

Malware Analysis – persistence – 9476b5f481090ea650cfc65e017dc41c

Malware Analysis – evasion – 16deea31a988e7af71001c2eda8ad614

Malware Analysis – phobos – 377aa2486224f59074c39512f6d5bf08

Malware Analysis – phobos – b8d08e441562570f4bdca07a259da9a2

Malware Analysis – phobos – 78e7a770f7af0b3fa64fc324c391e288

Malware Analysis – ransomware – ddee92c23a182d69884422c1e8a3df1b

Malware Analysis – evasion – fa7229691c60464db93975f90ba1d566

Malware Analysis – persistence – c60d51beca144f33e926955116c906b5

Malware Analysis – ransomware – 5c58ed8ef5fc167a8fe10ef53d5734c5

Malware Analysis – ransomware – 94f8cfa9fded0b21d77b6f3dca1bfe47

Malware Analysis – spyware – 63dbc6fe48f66d66214c2b6c93b60fbd

Malware Analysis – – 78b7157812e786cc63eb362fa539271e

Malware Analysis – smokeloader – 3eb587859a472ae910f2f21fbdd70db5

Cobalt Stike Beacon Detected – 35[.]201[.]225[.]182:80

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases Eight Industrial Control Systems Advisories

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Partners with ASD’s ACSC, CCCS, NCSC-UK, and Other International and US Organizations to Release Guidance on Edge Devices

CISA: CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware

You may have missed