threatintel

Malware Analysis – ctblocker – 8002e12ee374b2cb136757a46116244b

November 26, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: 8002e12ee374b2cb136757a46116244bSHA1: 08afb20b09ebbeb30939389edc7e53b6f4c1fc57ANALYSIS DATE: 2022-11-25T23:06:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – gozi – 40cd2fec7ef2cada01d56afbae18015b

November 26, 2022

Score: 10 MALWARE FAMILY: goziTAGS:family:gozi, botnet:1012, banker, isfb, persistence, ransomware, trojanMD5: 40cd2fec7ef2cada01d56afbae18015bSHA1: 512de247dbceb55babbf55e9d0945810f389674dANALYSIS DATE: 2022-11-25T23:06:53ZTTPS: T1060, T1112, T1082, T1158, T1491...

Malware Analysis – ransomware – f7bf40a04f42e1f14e54a18d3c61897f

November 26, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f7bf40a04f42e1f14e54a18d3c61897fSHA1: 3eebc14f1c70ae9d4fa493c650a94d12257b2435ANALYSIS DATE: 2022-11-26T00:06:08ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 67a532c43f067779df6eac4ae0acc07c

November 26, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 67a532c43f067779df6eac4ae0acc07cSHA1: cbf2efd61bebfa08613cf66a66b87e0a8a259af8ANALYSIS DATE: 2022-11-25T23:31:19ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 65c094df3fd52240b1068d843ba91a1f

November 26, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 65c094df3fd52240b1068d843ba91a1fSHA1: bf071072b54701aacd3f303e94350ecce7642a50ANALYSIS DATE: 2022-11-25T23:55:52ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – de6e3970ad991d0214e6dfa06439e31f

November 26, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: de6e3970ad991d0214e6dfa06439e31fSHA1: b8792436f1541e76f4468769561b9a7bad03bd35ANALYSIS DATE: 2022-11-25T23:38:35ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 6e13ce8eed45e35d8fdaccd83fec9df0

November 26, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6e13ce8eed45e35d8fdaccd83fec9df0SHA1: e5a907db2f97081efda62aeb91633c8bf062653fANALYSIS DATE: 2022-11-26T00:19:30ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – gozi – f2c99d1468069fee1417e16f09bba493

November 26, 2022

Score: 10 MALWARE FAMILY: goziTAGS:family:gozi, botnet:1012, banker, isfb, persistence, ransomware, trojanMD5: f2c99d1468069fee1417e16f09bba493SHA1: d2e4cea9cf77cfddfad8f4eb572d1c8e64c64256ANALYSIS DATE: 2022-11-26T00:19:07ZTTPS: T1158, T1060, T1112, T1491, T1082...

Malware Analysis – gozi – cafb427e5aaf01dc82002021fa1c5211

November 26, 2022

Score: 10 MALWARE FAMILY: goziTAGS:family:gozi, botnet:1012, banker, isfb, persistence, ransomware, trojanMD5: cafb427e5aaf01dc82002021fa1c5211SHA1: 5936a585083d8d8955b70fdf0153071de2360af3ANALYSIS DATE: 2022-11-26T00:18:09ZTTPS: T1082, T1158, T1060, T1112, T1491...

Malware Analysis – adware – 904ea4ab8e83c9da097992e3074f7c30

November 26, 2022

Score: 9 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 904ea4ab8e83c9da097992e3074f7c30SHA1: 5c2aba18286c7b375e7087a44ea1326b2960036eANALYSIS DATE: 2022-11-26T00:14:20ZTTPS: T1012, T1120, T1082, T1112, T1176, T1060,...

Malware Analysis – djvu – e054f0c83023d1414143cb43e0e99ced

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: e054f0c83023d1414143cb43e0e99cedSHA1: 570d8ec32ce32407bc2a3b338b250d1f181182beANALYSIS DATE: 2022-11-26T09:37:02ZTTPS:...

Malware Analysis – djvu – 5827e0e1155bfeb117d59500880594ee

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5827e0e1155bfeb117d59500880594eeSHA1: 683a2b4b03efe5beb7c0988123caf91f085ac759ANALYSIS DATE: 2022-11-26T09:37:45ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – discovery – 258df8a124d09fe96fcc237521c23ad8

November 26, 2022

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistence, upxMD5: 258df8a124d09fe96fcc237521c23ad8SHA1: 68a593b1faa78e2bba81732ed22da02e57291a23ANALYSIS DATE: 2022-11-26T00:24:08ZTTPS: T1060, T1112, T1082, T1222, T1012 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 9aa95b27ff879d63f093759239086a50

November 26, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 9aa95b27ff879d63f093759239086a50SHA1: 889325176e8c14cf31f0d940abcb0c027af5072bANALYSIS DATE: 2022-11-26T00:21:55ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 146[.]70[.]147[.]29:443

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 87[.]120[.]254[.]95:80

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]55[.]77[.]27:443

November 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – f41e454bd8f94376f0fe048abfe9b593

November 26, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: f41e454bd8f94376f0fe048abfe9b593SHA1: f8ad417688ce8954e11052c681fc10db203f932dANALYSIS DATE: 2022-11-26T10:32:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 3c30d848c6bfd14d392dc1f896bdd2bd

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 3c30d848c6bfd14d392dc1f896bdd2bdSHA1: 01652e13cacdd2a27fddb724567287a8a5f9ffe0ANALYSIS DATE: 2022-11-26T10:22:57ZTTPS:...

Malware Analysis – amadey – e9f6fccda69077cfc6d220e0f665264c

November 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, collection, spyware, stealer, trojanMD5: e9f6fccda69077cfc6d220e0f665264cSHA1: 87be46433353c2f746df5f84f14fd21bcd50e55bANALYSIS DATE: 2022-11-26T10:01:05ZTTPS: T1082, T1053, T1005, T1081, T1114 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 9100c922c30fa97bfd28bca79b05370f

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9100c922c30fa97bfd28bca79b05370fSHA1: 631d68e1a96c9d45d27991c6f913375cd44d44bbANALYSIS DATE: 2022-11-26T10:07:02ZTTPS: T1005, T1081, T1012, T1060,...

threatintel

Malware Analysis – ctblocker – 8002e12ee374b2cb136757a46116244b

Malware Analysis – gozi – 40cd2fec7ef2cada01d56afbae18015b

Malware Analysis – ransomware – f7bf40a04f42e1f14e54a18d3c61897f

Malware Analysis – evasion – 67a532c43f067779df6eac4ae0acc07c

Malware Analysis – evasion – 65c094df3fd52240b1068d843ba91a1f

Malware Analysis – evasion – de6e3970ad991d0214e6dfa06439e31f

Malware Analysis – persistence – 6e13ce8eed45e35d8fdaccd83fec9df0

Malware Analysis – gozi – f2c99d1468069fee1417e16f09bba493

Malware Analysis – gozi – cafb427e5aaf01dc82002021fa1c5211

Malware Analysis – adware – 904ea4ab8e83c9da097992e3074f7c30

Malware Analysis – djvu – e054f0c83023d1414143cb43e0e99ced

Malware Analysis – djvu – 5827e0e1155bfeb117d59500880594ee

Malware Analysis – discovery – 258df8a124d09fe96fcc237521c23ad8

Malware Analysis – persistence – 9aa95b27ff879d63f093759239086a50

Cobalt Stike Beacon Detected – 146[.]70[.]147[.]29:443

Cobalt Stike Beacon Detected – 87[.]120[.]254[.]95:80

Cobalt Stike Beacon Detected – 120[.]55[.]77[.]27:443

Malware Analysis – – f41e454bd8f94376f0fe048abfe9b593

Malware Analysis – djvu – 3c30d848c6bfd14d392dc1f896bdd2bd

Malware Analysis – amadey – e9f6fccda69077cfc6d220e0f665264c

Malware Analysis – djvu – 9100c922c30fa97bfd28bca79b05370f

Cobalt Stike Beacon Detected – 1[.]12[.]55[.]126:1111

Cobalt Stike Beacon Detected – 117[.]50[.]190[.]207:443

Cobalt Stike Beacon Detected – 38[.]54[.]32[.]75:443

[RANSOMHUB] – Ransomware Victim: www[.]americanstandard-us[.]com

[SPACEBEARS] – Ransomware Victim: Christian Community Aid

[CLOP] – Ransomware Victim: JOMARSOFTCORP[.]COM

Microsoft Monthly Security Update (October 2024)

CVE Alert: CVE-2025-21566

You may have missed