threatintel

Malware Analysis – evasion – 10a428250ce76a2d5e1a099237271790

November 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojan, upxMD5: 10a428250ce76a2d5e1a099237271790SHA1: 0201d09c99010311846c39024cbac153ead2c74fANALYSIS DATE: 2022-11-06T04:23:47ZTTPS: T1082, T1088, T1089, T1112, T1031, T1005,...

Malware Analysis – adware – 30898d305c059d8c1e74b4b3bfc46db0

November 6, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 30898d305c059d8c1e74b4b3bfc46db0SHA1: b68399ee1dc5777839879400674ac94f694aca96ANALYSIS DATE: 2022-11-06T04:19:00ZTTPS: T1222, T1112, T1176, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – adware – 204bfeaaa385a07a53d0368d6ca56ad0

November 6, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 204bfeaaa385a07a53d0368d6ca56ad0SHA1: c9de1a8d55452874be23182e4d7093e5a8521fb4ANALYSIS DATE: 2022-11-06T04:19:06ZTTPS: T1222, T1112, T1176, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – adware – 13797d259eae7789cb3c0284f0260b10

November 6, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 13797d259eae7789cb3c0284f0260b10SHA1: bfca5302ac52dbec668392e3572f06ca66b5e9abANALYSIS DATE: 2022-11-06T04:19:03ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 157e936faae225b8bb827a469d9955c0

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 157e936faae225b8bb827a469d9955c0SHA1: 54dfd788c00af47c5047f5485bdc15987c89e05dANALYSIS DATE: 2022-11-06T04:26:56ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 306873e273f3438ba4209c587c584f10

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 306873e273f3438ba4209c587c584f10SHA1: 32f9869a560f1ac7e52de2233d2360d0af4ad7d3ANALYSIS DATE: 2022-11-06T05:04:41ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 250c1b6bcc5fe9b36a485d0debe048a0

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 250c1b6bcc5fe9b36a485d0debe048a0SHA1: 5ba0c24a3e61c66793e594be30ba4c2ac9401641ANALYSIS DATE: 2022-11-06T05:04:44ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – smokeloader – 21e1eef72e17c352692ef0be36c570e4

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 21e1eef72e17c352692ef0be36c570e4SHA1: 9f86c47eae56197854c5518db9994c34fbbdca67ANALYSIS DATE: 2022-11-06T04:32:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 0fb86805bc3c7e0d5ed26bbf57a4724d

November 6, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0fb86805bc3c7e0d5ed26bbf57a4724dSHA1: 78c9b1e7c52fa37dcb4660397188ec713a2a44c7ANALYSIS DATE: 2022-11-06T05:20:32ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – discovery – 10b60193e3723958abf271e79434dd80

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 10b60193e3723958abf271e79434dd80SHA1: 6a6552952fe17a8e34248bd947d536bb17ac0327ANALYSIS DATE: 2022-11-06T05:04:47ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – azov – 7129291fc3d97377200f8a24ad06930a

November 6, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 7129291fc3d97377200f8a24ad06930aSHA1: 3f858d2837529e6c973ffa7c26c643e9748e7282ANALYSIS DATE: 2022-11-06T05:24:34ZTTPS: T1005, T1081, T1012, T1120, T1082, T1060,...

Malware Analysis – djvu – 1a1e17a50fc5346c17137b95629d62c8

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 1a1e17a50fc5346c17137b95629d62c8SHA1: 859ea4abdd308bb59136c2e21d412f8c154800e5ANALYSIS DATE: 2022-11-06T05:39:09ZTTPS:...

threatintel

Malware Analysis – evasion – 10a428250ce76a2d5e1a099237271790

Malware Analysis – adware – 30898d305c059d8c1e74b4b3bfc46db0

Malware Analysis – adware – 204bfeaaa385a07a53d0368d6ca56ad0

Malware Analysis – adware – 13797d259eae7789cb3c0284f0260b10

Malware Analysis – discovery – 157e936faae225b8bb827a469d9955c0

Malware Analysis – discovery – 306873e273f3438ba4209c587c584f10

Malware Analysis – discovery – 250c1b6bcc5fe9b36a485d0debe048a0

Malware Analysis – smokeloader – 21e1eef72e17c352692ef0be36c570e4

Malware Analysis – ransomware – 0fb86805bc3c7e0d5ed26bbf57a4724d

Malware Analysis – discovery – 10b60193e3723958abf271e79434dd80

Malware Analysis – azov – 7129291fc3d97377200f8a24ad06930a

Malware Analysis – djvu – 1a1e17a50fc5346c17137b95629d62c8

Cobalt Stike Beacon Detected – 20[.]7[.]201[.]45:443

Cobalt Stike Beacon Detected – 3[.]120[.]38[.]93:80

Cobalt Stike Beacon Detected – 43[.]154[.]223[.]191:80

Cobalt Stike Beacon Detected – 193[.]106[.]191[.]176:443

Cobalt Stike Beacon Detected – 174[.]138[.]21[.]86:443

Cobalt Stike Beacon Detected – 123[.]207[.]216[.]145:80

Cobalt Stike Beacon Detected – 47[.]92[.]52[.]118:800

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]144:443

Cobalt Stike Beacon Detected – 40[.]113[.]195[.]1:80

Cobalt Stike Beacon Detected – 85[.]239[.]53[.]92:24

Cobalt Stike Beacon Detected – 121[.]131[.]40[.]171:443

Cobalt Stike Beacon Detected – 20[.]7[.]201[.]45:80

Cobalt Strike Beacon Detected – 182[.]160[.]14[.]158:7777

Cobalt Strike Beacon Detected – 106[.]75[.]247[.]91:443

Cobalt Strike Beacon Detected – 118[.]25[.]91[.]151:443

Cobalt Strike Beacon Detected – 39[.]98[.]40[.]53:8888

Cobalt Strike Beacon Detected – 156[.]224[.]19[.]17:443

You may have missed