threatintel

Malware Analysis – – 9d90ec66bb19ef146bab226bea33179f

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 9d90ec66bb19ef146bab226bea33179fSHA1: be8e6a3c530379d93bd4da368ef63feed975eeebANALYSIS DATE: 2022-10-21T19:25:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 9b9990715e97a109dcf3ca50c261117c

October 23, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 9b9990715e97a109dcf3ca50c261117cSHA1: 0015726a1a50e9925145eaf1e3b07961245b4dd1ANALYSIS DATE: 2022-10-22T21:00:19ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – djvu – 168af1f71f98c7211ff6ba66d13cd2df

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 168af1f71f98c7211ff6ba66d13cd2dfSHA1: 0d21dcc28537be467b80dc8772ed6c0951419fd4ANALYSIS DATE: 2022-10-22T20:32:08ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – ransomware – 12cf5b208e41d71e1e3ce6011683cf6d

October 23, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 12cf5b208e41d71e1e3ce6011683cf6dSHA1: 0bfefd02ab296c6b9ecb266e9d4d80506cef76f5ANALYSIS DATE: 2022-10-22T21:09:43ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – d9001e295434d715d2d68cff6642425d

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d9001e295434d715d2d68cff6642425dSHA1: 042ddd3e3703cbaa81e22b72bcabbcdefc046670ANALYSIS DATE: 2022-10-22T21:20:43ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – banker – c1f57d168e3799db1e9bf566e451b93f

October 23, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: c1f57d168e3799db1e9bf566e451b93fSHA1: f7eb4ef4a360cf0a14aafb0c26ae2dc1576989faANALYSIS DATE: 2022-10-22T21:13:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 0483e20297a6c648111f3a79b352c71a

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0483e20297a6c648111f3a79b352c71aSHA1: 1b2a16253482595aca2c4b31b76f98846c7dfe12ANALYSIS DATE: 2022-10-22T21:12:59ZTTPS: T1060, T1112, T1082, T1053,...

Posh C2 Detected – 54[.]37[.]225[.]27:443

October 23, 2022

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

Malware Analysis – wannacry – ed2c789b87728fb5a71105c24348ab14

October 23, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: ed2c789b87728fb5a71105c24348ab14SHA1: c0efa6b71ffd0e12e48eee3697a2b4dc88afe47aANALYSIS DATE: 2022-10-22T22:40:19ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 22e8a12784b65287f97914473b4581fd

October 23, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 22e8a12784b65287f97914473b4581fdSHA1: f0901b6e57fb74484629f098e9509758ef7c4a48ANALYSIS DATE: 2022-10-22T22:00:21ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – da8ae748568d252c27af7457be7a4ab5

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: da8ae748568d252c27af7457be7a4ab5SHA1: 913b2268de16a4294c433f97bbb4439634f7b564ANALYSIS DATE: 2022-10-22T21:48:26ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – – 106bdbb47b30a477321b204108577744

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 106bdbb47b30a477321b204108577744SHA1: b177e0df659779ca1165b8b35cb7e09754129401ANALYSIS DATE: 2022-10-22T21:30:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Daixin Team targets health organizations with ransomware, US agencies warn

October 22, 2022

US government agencies warned that the Daixin Team cybercrime group is actively targeting the U.S. Healthcare and Public Health sector...

Malware Analysis – discovery – 443247892070b27552695efb25cbd370

October 22, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 443247892070b27552695efb25cbd370SHA1: 9994e9ff44bfa117ffe2f73b3f974a639f99d751ANALYSIS DATE: 2022-10-21T13:54:38ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – 7941708f058beca69eaf0f9d7618d020

October 22, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7941708f058beca69eaf0f9d7618d020SHA1: 0be04012482c6df1410db047523524e6b8aa9b8aANALYSIS DATE: 2022-10-21T14:19:14ZTTPS: T1082, T1112, T1060, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – persistence – 62da799689f1fa028572e529a36982a3

October 22, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 62da799689f1fa028572e529a36982a3SHA1: dbf2f865e0d1bab2613015312eaded00cfa60877ANALYSIS DATE: 2022-10-21T14:19:16ZTTPS: T1107, T1490, T1082, T1112, T1060 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – discovery – 1344621b4058158942a763ad534a01d0

October 22, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 1344621b4058158942a763ad534a01d0SHA1: a5577f6bbfdf07f8627a23946ff3147c6840668fANALYSIS DATE: 2022-10-21T13:54:04ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – e6dcc0d19c42acf6f8bc0a5fb295dc71

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: e6dcc0d19c42acf6f8bc0a5fb295dc71SHA1: b932cd7e0c43288444e34c7ad00639ae52b1e865ANALYSIS DATE: 2022-10-22T14:00:25ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – evasion – 13423360b8c1ffb02fac15d4f4c2b261

October 22, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 13423360b8c1ffb02fac15d4f4c2b261SHA1: b7bd5e7f2d7ef49967f921d263251bf2445a1ce8ANALYSIS DATE: 2022-10-21T14:20:10ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 35dddd354540c317a9b131af025fea15

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 35dddd354540c317a9b131af025fea15SHA1: f4077779d53f962c53674957feadc83cd718c124ANALYSIS DATE: 2022-10-22T14:10:44ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – persistence – 115c90fa3782f94e7beb2959903293bc

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 115c90fa3782f94e7beb2959903293bcSHA1: 1667f62eed47dfd608fe8f4b8b74b6a20b00a084ANALYSIS DATE: 2022-10-22T14:00:38ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – evasion – 9aac8706399f0fefe526d057ab9d8fdf

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: 9aac8706399f0fefe526d057ab9d8fdfSHA1: 3f128622b34f674ba42b755a51c26359f1dc093dANALYSIS DATE: 2022-10-22T14:40:17ZTTPS: T1057, T1082, T1053, T1107, T1490, T1112, T1031, T1012, T1120,...

Malware Analysis – persistence – 17c27a27f56d52944388c05f1dec03ec

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 17c27a27f56d52944388c05f1dec03ecSHA1: a3b268525772b10ca5d689ee2c2f4365334118d0ANALYSIS DATE: 2022-10-22T14:40:29ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – evasion – 674e7ee905d24a89af47b53b53ffc23c

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 674e7ee905d24a89af47b53b53ffc23cSHA1: c6b73b882aa1f4d46ec655a5591a28638700856cANALYSIS DATE: 2022-10-22T14:40:35ZTTPS: T1490, T1059, T1107, T1082, T1012, T1120, T1485 ScoreMeaningExample10Known badA malware...

threatintel

Malware Analysis – – 9d90ec66bb19ef146bab226bea33179f

Malware Analysis – persistence – 9b9990715e97a109dcf3ca50c261117c

Malware Analysis – djvu – 168af1f71f98c7211ff6ba66d13cd2df

Malware Analysis – ransomware – 12cf5b208e41d71e1e3ce6011683cf6d

Malware Analysis – djvu – d9001e295434d715d2d68cff6642425d

Malware Analysis – banker – c1f57d168e3799db1e9bf566e451b93f

Malware Analysis – djvu – 0483e20297a6c648111f3a79b352c71a

Posh C2 Detected – 54[.]37[.]225[.]27:443

Malware Analysis – wannacry – ed2c789b87728fb5a71105c24348ab14

Malware Analysis – wannacry – 22e8a12784b65287f97914473b4581fd

Malware Analysis – djvu – da8ae748568d252c27af7457be7a4ab5

Malware Analysis – – 106bdbb47b30a477321b204108577744

Daixin Team targets health organizations with ransomware, US agencies warn

Malware Analysis – discovery – 443247892070b27552695efb25cbd370

Malware Analysis – persistence – 7941708f058beca69eaf0f9d7618d020

Malware Analysis – persistence – 62da799689f1fa028572e529a36982a3

Malware Analysis – discovery – 1344621b4058158942a763ad534a01d0

Malware Analysis – persistence – e6dcc0d19c42acf6f8bc0a5fb295dc71

Malware Analysis – evasion – 13423360b8c1ffb02fac15d4f4c2b261

Malware Analysis – djvu – 35dddd354540c317a9b131af025fea15

Malware Analysis – persistence – 115c90fa3782f94e7beb2959903293bc

Malware Analysis – evasion – 9aac8706399f0fefe526d057ab9d8fdf

Malware Analysis – persistence – 17c27a27f56d52944388c05f1dec03ec

Malware Analysis – evasion – 674e7ee905d24a89af47b53b53ffc23c

[EVEREST] – Ransomware Victim: Solaris Pharma proof

CISA: CISA and Partners Release Call to Action to Close the National Software Understanding Gap

[EVEREST] – Ransomware Victim: Woodlake

[EVEREST] – Ransomware Victim: The Hoff Brand SL

[EVEREST] – Ransomware Victim: Volt Infrastructure

You may have missed