threatintel

Malware Analysis – persistence – 82934392d0e7c58c94ae595a91c0680c

November 8, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 82934392d0e7c58c94ae595a91c0680cSHA1: 864237b29a4ce886556c4f104563dad7e36954caANALYSIS DATE: 2022-11-07T09:19:46ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 0ed25ef75b69f6e095b59f64722c20f6

November 8, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 0ed25ef75b69f6e095b59f64722c20f6SHA1: 820231547d0897ad02feaf87a20db4410aefed6eANALYSIS DATE: 2022-11-07T09:25:01ZTTPS: T1222, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – adware – 0922b6822bf9de45f4ba68a936557c30

November 8, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealerMD5: 0922b6822bf9de45f4ba68a936557c30SHA1: a9aba947f9bd21d6e0aa861643e974ab7e54162aANALYSIS DATE: 2022-11-07T09:37:44ZTTPS: T1012, T1120, T1082, T1112, T1176, T1060, T1222...

Malware Analysis – discovery – 0d688c12a4c3d854061590d33a0d2386

November 8, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 0d688c12a4c3d854061590d33a0d2386SHA1: 0cde2788d8a01cf3bb1afe11606237fea50cf064ANALYSIS DATE: 2022-11-07T09:34:06ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 0cea6d4f5ce1e881f40134f1acda53a1

November 8, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 0cea6d4f5ce1e881f40134f1acda53a1SHA1: cf32b85dda9346332772df2f319aa10eea866910ANALYSIS DATE: 2022-11-07T09:41:34ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 011dfb485d011bcc8dbaa39ca39ea16a

November 8, 2022

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, ransomware, spyware, stealerMD5: 011dfb485d011bcc8dbaa39ca39ea16aSHA1: 4b8509e5d88ad357c993110e91dad13feb32d621ANALYSIS DATE: 2022-11-07T09:43:41ZTTPS: T1046, T1082, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 089678330c051967011b5fea6c2835a6

November 8, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 089678330c051967011b5fea6c2835a6SHA1: 4c8df21d90ee54d0342279650f9b8aac2ccc8065ANALYSIS DATE: 2022-11-07T10:06:14ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 0d2b38415941d62f462315f6ce8ca851

November 8, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 0d2b38415941d62f462315f6ce8ca851SHA1: 826af20b72d2f40fbbb3cb4cf10a87dc948c18b1ANALYSIS DATE: 2022-11-07T09:59:08ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – 6facc781bcd3de391d4d3c161856624c

November 8, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6facc781bcd3de391d4d3c161856624cSHA1: 59579bb7d1da8e590e30e5c1181b24aaa9fe7abaANALYSIS DATE: 2022-11-07T10:07:40ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]93:80

November 8, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 056f96dd83869178cc89db4fc54d6d90

November 8, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 056f96dd83869178cc89db4fc54d6d90SHA1: b1634bbabcc7da99162eaa98a074b3d2d9795ccaANALYSIS DATE: 2022-11-07T09:51:00ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]110:80

November 8, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]142:443

November 8, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]4[.]79[.]90:80

November 8, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Black Basta Ransomware Victim: METRO

November 8, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – djvu – def09643dae2dbb070586b91735b5845

November 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: def09643dae2dbb070586b91735b5845SHA1: a1ee1c25401eb18f23510e69e64497fb8e78d640ANALYSIS DATE: 2022-11-07T21:13:04ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – ransomware – cd7edce6aa9c3799e5b913481a86177d

November 8, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: cd7edce6aa9c3799e5b913481a86177dSHA1: 06dd14745ab11c9ea657a4a21826cb080d07eaf5ANALYSIS DATE: 2022-11-07T23:40:25ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – d7b5002c49e6158aadb8da692ee90caf

November 8, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: d7b5002c49e6158aadb8da692ee90cafSHA1: 519d9b9217507b9142d2df937a01086bcaf8b24dANALYSIS DATE: 2022-11-07T10:17:21ZTTPS: T1158, T1112, T1088, T1089, T1005, T1081,...

Malware Analysis – adware – 0eb27d82d64fd4bb872dcfac524e9a40

November 8, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealerMD5: 0eb27d82d64fd4bb872dcfac524e9a40SHA1: 5994c7b5d7720ea1c832823a3513add7b496ca96ANALYSIS DATE: 2022-11-07T10:18:56ZTTPS: T1222, T1012, T1120, T1082, T1112, T1176, T1060...

Are Containers Affected by OpenSSL Vulnerabilities?

November 7, 2022

Find out if your container-based applications are vulnerable to the new OpenSSL vulnerabilities and the recommendations to help ensure you...

US-CERT Bulletin (SB22-311):Vulnerability Summary for the Week of October 31, 2022

November 7, 2022

The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards...

‘Justice Blade’ Hackers are Targeting Saudi Arabia

November 7, 2022

Threats actors calling themselves “Justice Blade” published leaked data from an outsourcing IT vendor. The group of threat actors calling...

LockBit 3.0 Ransomware Victim: richard-wolf[.]com

November 7, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – xorist – 06ef31e62e5b10e2bacae0493e98e836

November 7, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 06ef31e62e5b10e2bacae0493e98e836SHA1: 0d8bb8222f1a324e048fb293011db5621ea8299cANALYSIS DATE: 2022-11-07T04:32:36ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

threatintel

Malware Analysis – persistence – 82934392d0e7c58c94ae595a91c0680c

Malware Analysis – discovery – 0ed25ef75b69f6e095b59f64722c20f6

Malware Analysis – adware – 0922b6822bf9de45f4ba68a936557c30

Malware Analysis – discovery – 0d688c12a4c3d854061590d33a0d2386

Malware Analysis – discovery – 0cea6d4f5ce1e881f40134f1acda53a1

Malware Analysis – discovery – 011dfb485d011bcc8dbaa39ca39ea16a

Malware Analysis – discovery – 089678330c051967011b5fea6c2835a6

Malware Analysis – discovery – 0d2b38415941d62f462315f6ce8ca851

Malware Analysis – persistence – 6facc781bcd3de391d4d3c161856624c

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]93:80

Malware Analysis – discovery – 056f96dd83869178cc89db4fc54d6d90

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]110:80

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]142:443

Cobalt Stike Beacon Detected – 121[.]4[.]79[.]90:80

Black Basta Ransomware Victim: METRO

Malware Analysis – djvu – def09643dae2dbb070586b91735b5845

Malware Analysis – ransomware – cd7edce6aa9c3799e5b913481a86177d

Malware Analysis – evasion – d7b5002c49e6158aadb8da692ee90caf

Malware Analysis – adware – 0eb27d82d64fd4bb872dcfac524e9a40

Are Containers Affected by OpenSSL Vulnerabilities?

US-CERT Bulletin (SB22-311):Vulnerability Summary for the Week of October 31, 2022

‘Justice Blade’ Hackers are Targeting Saudi Arabia

LockBit 3.0 Ransomware Victim: richard-wolf[.]com

Malware Analysis – xorist – 06ef31e62e5b10e2bacae0493e98e836

[QILIN] – Ransomware Victim: Richardson

[RHYSIDA] – Ransomware Victim: TG3 Electronics

CVE Alert: CVE-2025-0308

CVE Alert: CVE-2024-12385

CVE Alert: CVE-2024-13516

You may have missed