threatintel

Malware Analysis – amadey – 399dbde569fd5be70901eaf962498ae0

November 6, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:google2, botnet:mast1000, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 399dbde569fd5be70901eaf962498ae0SHA1:...

Malware Analysis – djvu – 9af246175d3aad6567d80a9321cbf3f5

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9af246175d3aad6567d80a9321cbf3f5SHA1: d88e1017b30de070e3bb71190dd5641194a96168ANALYSIS DATE: 2022-11-06T13:08:47ZTTPS: T1060, T1112, T1082, T1053, T1005, T1081,...

Malware Analysis – evasion – 0f31eca0c350bd084573af4fd3c55835

November 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, upxMD5: 0f31eca0c350bd084573af4fd3c55835SHA1: a258d85eae493ac152ebeef24eb7d33087f9d8d8ANALYSIS DATE: 2022-11-06T13:13:13ZTTPS: T1112, T1060, T1158, T1012, T1120, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 20092d6774a7a044dccad662d8b6c4e1

November 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 20092d6774a7a044dccad662d8b6c4e1SHA1: 028fc537f2b6d075742940bdbe23403396d7ee7dANALYSIS DATE: 2022-11-06T13:00:33ZTTPS: T1158, T1112, T1012, T1120, T1082, T1060, T1042, T1091,...

Malware Analysis – djvu – 6a7cec5f400a75bc4ba866d1742283d8

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mast1000, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 6a7cec5f400a75bc4ba866d1742283d8SHA1: d2f8c9b43994887b7ec979f513d9343020d0914dANALYSIS DATE:...

Malware Analysis – smokeloader – a8ed8173770845fcdae4c2a5d54540d2

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a8ed8173770845fcdae4c2a5d54540d2SHA1: 745e4ea2e98224214a837344a902b3dfb7d738afANALYSIS DATE: 2022-11-06T15:02:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – 32899ed3680e121ffa948bca159a9136

November 6, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 32899ed3680e121ffa948bca159a9136SHA1: 9c58da55106e8f067c009de32c592bd815e43905ANALYSIS DATE: 2022-11-06T15:20:27ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – b4e3abf0d3ce1968b7164c9b8aa581e4

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: b4e3abf0d3ce1968b7164c9b8aa581e4SHA1: 6cc3296c37cc5415f7209e61070d61d435a67a3eANALYSIS DATE: 2022-11-06T17:05:16ZTTPS: T1012, T1082, T1005, T1081, T1060, T1112,...

Malware Analysis – joker – 7fea757ea8d41dcf19ae0f71e045893a

November 6, 2022

Score: 10 MALWARE FAMILY: jokerTAGS:family:joker, evasion, infostealer, ransomware, trojanMD5: 7fea757ea8d41dcf19ae0f71e045893aSHA1: 9dc27c1fd80c369118f9caeb864198896c1e10d4ANALYSIS DATE: 2022-11-06T16:39:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – f339c9ec92bd0832ba10ac145aace6bc

November 6, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f339c9ec92bd0832ba10ac145aace6bcSHA1: a7fbe5d47a0c08ee1185c08c101b0c7621da2f2eANALYSIS DATE: 2022-11-06T17:45:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – b9e814a62b41fa8fce7d5e2d0eca430c

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: b9e814a62b41fa8fce7d5e2d0eca430cSHA1: c69d2503062e6b9688ff4be6e91a02bd58ee938aANALYSIS DATE: 2022-11-06T17:46:33ZTTPS: T1005, T1081, T1060, T1112, T1222, T1082,...

Malware Analysis – ransomware – faae0c9ff75a84111700e7ee0345747f

November 6, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: faae0c9ff75a84111700e7ee0345747fSHA1: 2f3848bba4a0e9384afd144aa399fbb4a3467f36ANALYSIS DATE: 2022-11-06T17:32:04ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – c27a5d94ce500cbf368f35a01ae45ee6

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mast1000, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: c27a5d94ce500cbf368f35a01ae45ee6SHA1: 195cd4c26260fcd94e541f96b6f20848c2835f74ANALYSIS DATE:...

A cyberattack blocked the trains in Denmark

November 6, 2022

At the end of October, a cyber attack caused the trains to stop in Denmark, the attack hit a third-party...

Digital Binary Code on Dark Red Background. Data Breach

Lolzteam – 398,011 breached accounts

November 6, 2022

In May 2018, the Russian hacking forum Lolzteam suffered a data breach that exposed 400k members. The impacted data included...

Collect-MemoryDump – Automated Creation Of Windows Memory Snapshots For DFIR

November 6, 2022

Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR Collect-MemoryDump.ps1 is Fig 3: Automated Creation of Windows Memory Snapshot...