threatintel

Malware Analysis – evasion – 082ae3b6f159a68c4ff1c89594b7f221

November 7, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 082ae3b6f159a68c4ff1c89594b7f221SHA1: 541e2a85bb17c8e059b0ca513e941914c3baf8afANALYSIS DATE: 2022-11-07T04:20:10ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 0cd7d4b890893d0b1b43f9372c9679d0

November 7, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 0cd7d4b890893d0b1b43f9372c9679d0SHA1: 98ef16fc4599f6866797041f8b72fdd700321942ANALYSIS DATE: 2022-11-07T04:30:45ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – xorist – 0fe9aea31913d392769cc6bf40d2af61

November 7, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 0fe9aea31913d392769cc6bf40d2af61SHA1: 6caf7328e9abb5ce35dc7a4b3eb39726165f9877ANALYSIS DATE: 2022-11-07T04:32:40ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – xorist – 0db31955e3dc63769545a494d23cb356

November 7, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 0db31955e3dc63769545a494d23cb356SHA1: 53799e1ba3cd3b2d24f225e7785864b54f7581aaANALYSIS DATE: 2022-11-07T04:32:41ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – xorist – 0e23d1a8ca65a4067e50718305cd8956

November 7, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 0e23d1a8ca65a4067e50718305cd8956SHA1: 3d85d49bc151777e6553953dadd798fea00a8d15ANALYSIS DATE: 2022-11-07T04:32:38ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – xorist – 04fee8ac111c10660178f4ddbc1f17c9

November 7, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 04fee8ac111c10660178f4ddbc1f17c9SHA1: 57eb1390e539144d87bb4bb3c1c2c5103b50a819ANALYSIS DATE: 2022-11-07T04:32:43ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Robin Banks phishing-as-a-service platform continues to evolve

November 7, 2022

The phishing-as-a-service (PhaaS) platform Robin Banks migrated its infrastructure to DDoS-Guard, a Russian bulletproof hosting service. The phishing-as-a-service (PhaaS) platform Robin...

Malware Analysis – persistence – 0fc72ebcf25169644c11125b4d7353f0

November 7, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 0fc72ebcf25169644c11125b4d7353f0SHA1: b865c3cd110a262ce37dc6fbfc1d578c7ddabd32ANALYSIS DATE: 2022-11-07T04:35:45ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – adware – 0d1afcba9798b04f1f8cb790f01a3300

November 7, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 0d1afcba9798b04f1f8cb790f01a3300SHA1: fa57ea84af2a380c493d30830118c80e8f2bbc09ANALYSIS DATE: 2022-11-07T05:29:19ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – xorist – 0e2b1f1c0abb115f4514a05212a20233

November 7, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 0e2b1f1c0abb115f4514a05212a20233SHA1: afe35725bb3e6dfaff5db8335d017ebafecb94f3ANALYSIS DATE: 2022-11-07T04:32:45ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – 084775cdbfe7f93941d1066986289090

November 7, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 084775cdbfe7f93941d1066986289090SHA1: 515240bff4df8e5915ac65285868ae00bea11e55ANALYSIS DATE: 2022-11-07T04:36:20ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 0cda8babe6466ba9d6c392160339b010

November 7, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 0cda8babe6466ba9d6c392160339b010SHA1: 1eccc9c2c7ff81481f65a5cfb5612b19ae243c02ANALYSIS DATE: 2022-11-07T05:39:43ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 0f604a28d1f4100fa5225bdc09852bc6

November 7, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 0f604a28d1f4100fa5225bdc09852bc6SHA1: f33f902e7de406ac53e4fea03f419d0f2e1299c9ANALYSIS DATE: 2022-11-07T05:39:44ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 0659c3376dffe4ccf0e3afd688829300

November 7, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 0659c3376dffe4ccf0e3afd688829300SHA1: b3ba94eaf100a37605646123975ee31f7802135dANALYSIS DATE: 2022-11-07T05:39:41ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – adware – 0d253b3abddfb2b204fa5d30131d5f50

November 7, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 0d253b3abddfb2b204fa5d30131d5f50SHA1: e213a198af40e48cc7ebdb76a23602c14546e60dANALYSIS DATE: 2022-11-07T05:29:21ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

BlackCat/ALPHV Ransomware Victim: Bosselman Energy Inc

November 7, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malware Analysis – discovery – 050416a9cdaf618b5bb3f8ec9067d256

November 7, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 050416a9cdaf618b5bb3f8ec9067d256SHA1: 88937ad89ac57caf7a1944e129d66760687f6342ANALYSIS DATE: 2022-11-07T05:39:50ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 04889728c050d67be39f3fe3b4122376

November 7, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 04889728c050d67be39f3fe3b4122376SHA1: dc31aa70c065b9d7d34a758c38a4a23db500f7d9ANALYSIS DATE: 2022-11-07T05:39:49ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 060461450676edfa35ae1b7da2a6c960

November 7, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 060461450676edfa35ae1b7da2a6c960SHA1: 38145cc619635534c6e080f448513713d6c5bf9cANALYSIS DATE: 2022-11-07T05:39:54ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 0ce6305e04025187ecf7d77fc0b252e0

November 7, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 0ce6305e04025187ecf7d77fc0b252e0SHA1: db791b56789cb0d0607af5736776eb5d1ee6391cANALYSIS DATE: 2022-11-07T05:39:55ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 39f6c9aa0fccc72e19583e71c0a44fad

November 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: 39f6c9aa0fccc72e19583e71c0a44fadSHA1: 08a6cae80a23dab5d52aa536e4e492a0d69d61d8ANALYSIS DATE: 2022-11-07T15:30:56ZTTPS: T1060, T1112, T1222, T1082, T1012,...

Malware Analysis – ermac – 2cb58ccb6461e4fe22bb22c0a5f78f9e

November 7, 2022

Score: 10 MALWARE FAMILY: ermacTAGS:family:ermac, banker, infostealer, ransomware, trojanMD5: 2cb58ccb6461e4fe22bb22c0a5f78f9eSHA1: c3b7edb3536045d3b81ad53c10405f04cf63bb3bANALYSIS DATE: 2022-11-07T15:28:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – discovery – 323c0fd51071400b51eedb1be90a8188

November 7, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, upxMD5: 323c0fd51071400b51eedb1be90a8188SHA1: 0efc35935957c25193bbe9a83ab6caa25a487adaANALYSIS DATE: 2022-11-07T14:56:50ZTTPS: T1082, T1012, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 056929e078b133dd231903ce0293f1e0

November 7, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 056929e078b133dd231903ce0293f1e0SHA1: 24aaff0cca4266d08545cfa438df8f5da87caa02ANALYSIS DATE: 2022-11-07T05:40:04ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – evasion – 082ae3b6f159a68c4ff1c89594b7f221

Malware Analysis – – 0cd7d4b890893d0b1b43f9372c9679d0

Malware Analysis – xorist – 0fe9aea31913d392769cc6bf40d2af61

Malware Analysis – xorist – 0db31955e3dc63769545a494d23cb356

Malware Analysis – xorist – 0e23d1a8ca65a4067e50718305cd8956

Malware Analysis – xorist – 04fee8ac111c10660178f4ddbc1f17c9

Robin Banks phishing-as-a-service platform continues to evolve

Malware Analysis – persistence – 0fc72ebcf25169644c11125b4d7353f0

Malware Analysis – adware – 0d1afcba9798b04f1f8cb790f01a3300

Malware Analysis – xorist – 0e2b1f1c0abb115f4514a05212a20233

Malware Analysis – persistence – 084775cdbfe7f93941d1066986289090

Malware Analysis – discovery – 0cda8babe6466ba9d6c392160339b010

Malware Analysis – discovery – 0f604a28d1f4100fa5225bdc09852bc6

Malware Analysis – discovery – 0659c3376dffe4ccf0e3afd688829300

Malware Analysis – adware – 0d253b3abddfb2b204fa5d30131d5f50

BlackCat/ALPHV Ransomware Victim: Bosselman Energy Inc

Malware Analysis – discovery – 050416a9cdaf618b5bb3f8ec9067d256

Malware Analysis – discovery – 04889728c050d67be39f3fe3b4122376

Malware Analysis – discovery – 060461450676edfa35ae1b7da2a6c960

Malware Analysis – discovery – 0ce6305e04025187ecf7d77fc0b252e0

Malware Analysis – djvu – 39f6c9aa0fccc72e19583e71c0a44fad

Malware Analysis – ermac – 2cb58ccb6461e4fe22bb22c0a5f78f9e

Malware Analysis – discovery – 323c0fd51071400b51eedb1be90a8188

Malware Analysis – discovery – 056929e078b133dd231903ce0293f1e0

[QILIN] – Ransomware Victim: Richardson

[RHYSIDA] – Ransomware Victim: TG3 Electronics

CVE Alert: CVE-2025-0308

CVE Alert: CVE-2024-12385

CVE Alert: CVE-2024-13516

You may have missed