threatintel

Malware Analysis – azov – 5438961a5f8b3fb4f1ab25c327d032b7

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: 5438961a5f8b3fb4f1ab25c327d032b7SHA1: 600928b807a35dbaec7b3ee913aba4fece17c688ANALYSIS DATE: 2022-11-13T05:04:05ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – azov – 85dd5fce0c097ca0d61f3e8894bb3fc3

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 85dd5fce0c097ca0d61f3e8894bb3fc3SHA1: 84de7b63b9ca39dc2b32cdef9a1431f244e29a13ANALYSIS DATE: 2022-11-13T05:02:04ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

Malware Analysis – azov – 0a8a8d7d504c21ca27d8bca620a46595

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 0a8a8d7d504c21ca27d8bca620a46595SHA1: 23787a4bc091c821543a54b86d91d24dee9455bdANALYSIS DATE: 2022-11-13T05:39:03ZTTPS: T1005, T1081, T1012, T1120, T1082, T1060,...

Malware Analysis – djvu – e22e75d5a31222d5ca54cc0efe34e77b

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e22e75d5a31222d5ca54cc0efe34e77bSHA1: 0822b46fc90c5956581dbbeac1bafe2b3a455b57ANALYSIS DATE: 2022-11-13T05:09:56ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 988bdaa991663005b67ac9b548fe5188

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:10k, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – azov – 9a5211f6e491d812d15363168783906c

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 9a5211f6e491d812d15363168783906cSHA1: 0d06ee595404de3264da3c71f489392b64fa1e2eANALYSIS DATE: 2022-11-13T05:39:03ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

Malware Analysis – azov – e966f2760b0d0f5ae5860a5790be4a35

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: e966f2760b0d0f5ae5860a5790be4a35SHA1: 16d0cbf30be1b864615b6d523402b2a59d3f3d44ANALYSIS DATE: 2022-11-13T05:39:04ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

Malware Analysis – persistence – c68a7ee39327605e0be374b27815cec4

November 13, 2022

Score: 6 MALWARE FAMILY: persistenceTAGS:persistenceMD5: c68a7ee39327605e0be374b27815cec4SHA1: af6f428fdacc8603119ecc829eddb9c8116a4d44ANALYSIS DATE: 2022-11-13T05:39:03ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – azov – 2ec99dfd801f57007edcf506a5a797d7

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: 2ec99dfd801f57007edcf506a5a797d7SHA1: 527373be5bf27ed99e686cafa8cc9791cc809eeeANALYSIS DATE: 2022-11-13T05:40:38ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – azov – 8c079977397f1b47170a3b7a3ac764ac

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 8c079977397f1b47170a3b7a3ac764acSHA1: 8c6a624e7defca16f2429b81be75cf181bae6c41ANALYSIS DATE: 2022-11-13T05:39:03ZTTPS: T1012, T1120, T1082, T1060, T1112, T1005,...

Cobalt Stike Beacon Detected – 47[.]93[.]253[.]29:80

November 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 172[.]104[.]240[.]104:444

November 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]174[.]186[.]23:8888

November 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]37[.]5[.]94:6666

November 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]71[.]171[.]237:80

November 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 327d973885a9f7bfd998980743a7428f

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 327d973885a9f7bfd998980743a7428fSHA1: 7dcdb1c2bf7fa83830871b9b0f41f41583709260ANALYSIS DATE: 2022-11-12T22:39:41ZTTPS: T1082, T1053, T1060, T1112, T1222 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – e92790f4cbac23ef0ffa9fac50d7b285

November 13, 2022

Malware Analysis – djvu – e7caf214e6b0f3ceb6caaf83a4eb3f77

November 13, 2022

Cobalt Stike Beacon Detected – 42[.]192[.]206[.]174:800

November 13, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

$1 billion of FTX customer funds have vanished, Reuters reported

November 12, 2022

Crypto exchange FTX appears to have been hacked, rumors state that attackers stole $600 million drained from the company’s wallets....

BlackCat/ALPHV Ransomware Victim: Motional[.]com

November 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: nobilityrcm[.]com / altapartnersllc[.]com / MFAST[.]com / MSBS[.]biz sym / elitemedicalbill[.]com

November 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malicious app in the Play Store spotted distributing Xenomorph Banking Trojan

November 12, 2022

Experts discovered two new malicious dropper apps on the Google Play Store distributing the Xenomorph banking malware. Zscaler ThreatLabz researchers...

Canadian supermarket chain giant Sobeys suffered a ransomware attack

November 12, 2022

Sobeys, the second-largest supermarket chain in Canada, was he victim of a ransomware attack conducted by the Black Basta gang....

threatintel

Malware Analysis – azov – 5438961a5f8b3fb4f1ab25c327d032b7

Malware Analysis – azov – 85dd5fce0c097ca0d61f3e8894bb3fc3

Malware Analysis – azov – 0a8a8d7d504c21ca27d8bca620a46595

Malware Analysis – djvu – e22e75d5a31222d5ca54cc0efe34e77b

Malware Analysis – djvu – 988bdaa991663005b67ac9b548fe5188

Malware Analysis – azov – 9a5211f6e491d812d15363168783906c

Malware Analysis – azov – e966f2760b0d0f5ae5860a5790be4a35

Malware Analysis – persistence – c68a7ee39327605e0be374b27815cec4

Malware Analysis – azov – 2ec99dfd801f57007edcf506a5a797d7

Malware Analysis – azov – 8c079977397f1b47170a3b7a3ac764ac

Cobalt Stike Beacon Detected – 47[.]93[.]253[.]29:80

Cobalt Stike Beacon Detected – 172[.]104[.]240[.]104:444

Cobalt Stike Beacon Detected – 107[.]174[.]186[.]23:8888

Cobalt Stike Beacon Detected – 121[.]37[.]5[.]94:6666

Cobalt Stike Beacon Detected – 124[.]71[.]171[.]237:80

Malware Analysis – djvu – 327d973885a9f7bfd998980743a7428f

Malware Analysis – djvu – e92790f4cbac23ef0ffa9fac50d7b285

Malware Analysis – djvu – e7caf214e6b0f3ceb6caaf83a4eb3f77

Cobalt Stike Beacon Detected – 42[.]192[.]206[.]174:800

$1 billion of FTX customer funds have vanished, Reuters reported

BlackCat/ALPHV Ransomware Victim: Motional[.]com

BlackCat/ALPHV Ransomware Victim: nobilityrcm[.]com / altapartnersllc[.]com / MFAST[.]com / MSBS[.]biz sym / elitemedicalbill[.]com

Malicious app in the Play Store spotted distributing Xenomorph Banking Trojan

Canadian supermarket chain giant Sobeys suffered a ransomware attack

[LYNX] – Ransomware Victim: Sentinel Systems

[LYNX] – Ransomware Victim: Angotti & Reilly

Cobalt Strike Beacon Detected – 124[.]71[.]164[.]7:5001

Cobalt Strike Beacon Detected – 101[.]35[.]235[.]124:4444

Cobalt Strike Beacon Detected – 106[.]75[.]62[.]120:8443

You may have missed