threatintel

Malware Analysis – evasion – 0f5326a6983815c50cb65e304d3bacc0

October 29, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 0f5326a6983815c50cb65e304d3bacc0SHA1: a3d1ba08ef6fdc11483f4dd82b01307f7ee352f1ANALYSIS DATE: 2022-10-28T19:47:28ZTTPS: T1005, T1081, T1060, T1112, T1088, T1089,...

Malware Analysis – evasion – 0c2bb1781f3bbbf6bb0de4652792db60

October 29, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojanMD5: 0c2bb1781f3bbbf6bb0de4652792db60SHA1: 1d802c6bd9d7e3ddfbaeb1556e96a7886639b76dANALYSIS DATE: 2022-10-28T19:47:40ZTTPS: T1112, T1158, T1088, T1089, T1082, T1005, T1081,...

Malware Analysis – ransomware – 9b6f2e8b8a9391f1e3060a021e551eac

October 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9b6f2e8b8a9391f1e3060a021e551eacSHA1: dc7803e26f559c78f3692b2796a7baf4663ac6b7ANALYSIS DATE: 2022-10-28T20:02:45ZTTPS: T1005, T1081, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – – 19f11577854b9170036dcc4bb7a3f207

October 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 19f11577854b9170036dcc4bb7a3f207SHA1: 11b6d886125cd8c102b46afd2f9ed3b2b81e1facANALYSIS DATE: 2022-10-28T20:59:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 0edc99bedc614907cc0f2b9684e5cb96

October 29, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 0edc99bedc614907cc0f2b9684e5cb96SHA1: 2a4437a6bfe5e7fee750969481a1b3c53db59dbaANALYSIS DATE: 2022-10-28T20:56:10ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – – b20d5ada2e81683bda32aa80cd71c025

October 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: b20d5ada2e81683bda32aa80cd71c025SHA1: 1ab3daa872761d887ef0be9ace528ee323201211ANALYSIS DATE: 2022-10-28T20:59:17ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 92[.]223[.]90[.]254:443

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 162[.]241[.]127[.]245:8080

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]137[.]97[.]210:8080

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – d2b2422d20badffbe872368c676203b4

October 29, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – amadey – 1a48121a07ef0fdc4f7ac9ca20e536a0

October 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, collection, persistence, ransomware, spyware, stealer, trojanMD5: 1a48121a07ef0fdc4f7ac9ca20e536a0SHA1: 5718d66e3347a41e725dd15c48a46001c90adf04ANALYSIS DATE: 2022-10-28T21:22:55ZTTPS: T1012, T1120, T1082, T1053, T1060,...

Malware Analysis – – ae676204ce9a3be542572c477a3f6fdc

October 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ae676204ce9a3be542572c477a3f6fdcSHA1: 1d1e9d95fc4dd709fb77e15c4d09b86793091a4cANALYSIS DATE: 2022-10-28T21:00:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – de1dd46f1db579b973d83f19b9b56e46

October 29, 2022

Score: 3 MALWARE FAMILY: TAGS:MD5: de1dd46f1db579b973d83f19b9b56e46SHA1: ace23bb2da65f550dcba125ffb0746987b60908fANALYSIS DATE: 2022-10-28T20:59:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 174[.]139[.]150[.]250:8080

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]93:443

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 118[.]195[.]221[.]189:443

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]3:80

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – be097e351869db5ba0b51d825111ba45

October 29, 2022

Malware Analysis – wannacry – 015362445a39c40edbe754fba2287fcd

October 29, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 015362445a39c40edbe754fba2287fcdSHA1: 3d063a1b1b5b426ae5bbffd21d5c38037289f662ANALYSIS DATE: 2022-10-28T21:40:21ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – amadey – 497ced44c4014b27093f2ae816385566

October 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, collection, persistence, ransomware, spyware, stealer, trojanMD5: 497ced44c4014b27093f2ae816385566SHA1: 9b3270a0c299774b13a0cd44d9d34c963a3e9c53ANALYSIS DATE: 2022-10-28T22:15:21ZTTPS: T1012, T1082, T1053, T1060, T1112,...

Malware Analysis – smokeloader – 539c6eaa3bd26db45d665ee0cb451a34

October 29, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 539c6eaa3bd26db45d665ee0cb451a34SHA1: 7556f8f25e8334b6315bb142fbe69e800cb0445cANALYSIS DATE: 2022-10-28T22:13:01ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – evasion – 0f5326a6983815c50cb65e304d3bacc0

Malware Analysis – evasion – 0c2bb1781f3bbbf6bb0de4652792db60

Malware Analysis – ransomware – 9b6f2e8b8a9391f1e3060a021e551eac

Malware Analysis – – 19f11577854b9170036dcc4bb7a3f207

Malware Analysis – discovery – 0edc99bedc614907cc0f2b9684e5cb96

Malware Analysis – – b20d5ada2e81683bda32aa80cd71c025

Cobalt Stike Beacon Detected – 92[.]223[.]90[.]254:443

Cobalt Stike Beacon Detected – 162[.]241[.]127[.]245:8080

Cobalt Stike Beacon Detected – 45[.]137[.]97[.]210:8080

Malware Analysis – djvu – d2b2422d20badffbe872368c676203b4

Malware Analysis – amadey – 1a48121a07ef0fdc4f7ac9ca20e536a0

Malware Analysis – – ae676204ce9a3be542572c477a3f6fdc

Malware Analysis – – de1dd46f1db579b973d83f19b9b56e46

Cobalt Stike Beacon Detected – 174[.]139[.]150[.]250:8080

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]93:443

Cobalt Stike Beacon Detected – 118[.]195[.]221[.]189:443

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]3:80

Malware Analysis – djvu – be097e351869db5ba0b51d825111ba45

Malware Analysis – wannacry – 015362445a39c40edbe754fba2287fcd

Malware Analysis – amadey – 497ced44c4014b27093f2ae816385566

Malware Analysis – smokeloader – 539c6eaa3bd26db45d665ee0cb451a34

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]20:443

Cobalt Stike Beacon Detected – 142[.]93[.]141[.]97:80

Cobalt Stike Beacon Detected – 139[.]198[.]122[.]88:443

CVE Alert: CVE-2025-21185

CVE Alert: CVE-2025-21399

CVE Alert: CVE-2025-0538

CVE Alert: CVE-2024-57252

CVE Alert: CVE-2023-50738

You may have missed