threatintel

Malware Analysis – ransomware – 870172f3804834a399be0c291cecc756

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 870172f3804834a399be0c291cecc756SHA1: 1272fddefcda82716aa71c89d7d925a8c0e4f31fANALYSIS DATE: 2022-10-21T14:40:17ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – discovery – 0c5a449950cd909f196542173a5dd3fc

October 21, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 0c5a449950cd909f196542173a5dd3fcSHA1: c80d67f53718354107dc90b8bd5f251d4db03732ANALYSIS DATE: 2022-10-21T15:26:52ZTTPS: T1012, T1082, T1060, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – lockbit – ef4a5d286011e8cd66514fa07ac99a29

October 21, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, evasion, persistence, ransomwareMD5: ef4a5d286011e8cd66514fa07ac99a29SHA1: 8458579dd79056cdddbab67f3c82832acd00ab6dANALYSIS DATE: 2022-10-21T15:00:46ZTTPS: T1490, T1059, T1107, T1060, T1112, T1082, T1012, T1120,...

Malware Analysis – discovery – 8c3ce9c090bd9fa2be2375904e042fe4

October 21, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 8c3ce9c090bd9fa2be2375904e042fe4SHA1: 1d14f719e46cd5d76c05ede355e7f11eee2c07c3ANALYSIS DATE: 2022-10-21T15:17:36ZTTPS: T1082, T1060, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – 2d4cbbfab9d173a12d9174130f7bcafb

October 21, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomwareMD5: 2d4cbbfab9d173a12d9174130f7bcafbSHA1: 6b652c8b623f16d1006f7f116f6fc3dad8ea7ea7ANALYSIS DATE: 2022-10-21T15:00:07ZTTPS: T1490, T1059, T1107, T1082, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – b57fa6fca0cff4f7612b9ff9f95c8805

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b57fa6fca0cff4f7612b9ff9f95c8805SHA1: df083f0b4a89dd9964db28685889a7a2c32858beANALYSIS DATE: 2022-10-21T15:36:39ZTTPS: T1005, T1081, T1222, T1012,...

Malware Analysis – persistence – 6f66102d811e4103ccfed34ec1baab4a

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6f66102d811e4103ccfed34ec1baab4aSHA1: f2a6a1e87f8d235eebfd457cab125423082fb49dANALYSIS DATE: 2022-10-21T15:40:23ZTTPS: T1091, T1060, T1112, T1005, T1081, T1082, T1107, T1490...

Malware Analysis – djvu – 07dd31fa45db1cc31252b872abc8c7af

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 07dd31fa45db1cc31252b872abc8c7afSHA1: 9643a41fef4af18b35b53c6671627debd88ec289ANALYSIS DATE: 2022-10-21T15:51:19ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – ransomware – a17412928dcd361f5e5da505949af250

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a17412928dcd361f5e5da505949af250SHA1: 155f2671b5311cde3d946e4b0e5685f1f9f5ea69ANALYSIS DATE: 2022-10-21T15:40:27ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – xorist – 177068f72d69a4594bc3721fc9c1d6f0

October 21, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 177068f72d69a4594bc3721fc9c1d6f0SHA1: a24fe2857a2386e2413afa1c7476110cfa7319b9ANALYSIS DATE: 2022-10-21T16:09:32ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 49ade3a18ead1ef1a4d92fb85605275c

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 49ade3a18ead1ef1a4d92fb85605275cSHA1: d2d2440959b3609a219508963f647ff4a821be22ANALYSIS DATE: 2022-10-21T16:04:39ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – persistence – d9d9419893fff428ee7efbeb334caa79

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: d9d9419893fff428ee7efbeb334caa79SHA1: b4cd590c102d27a606e0216f7dc55f0dc8793bf9ANALYSIS DATE: 2022-10-21T16:20:38ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – evasion – 10eb8999dd0c04774fb0998f80387dc0

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojan, upxMD5: 10eb8999dd0c04774fb0998f80387dc0SHA1: 7e53b412a5ee3a9914be897ff6454c04993c4b36ANALYSIS DATE: 2022-10-21T16:09:34ZTTPS: T1082, T1112, T1031, T1004, T1088, T1089,...

Malware Analysis – djvu – 456ba4280563e40da987d3402b777dfa

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 456ba4280563e40da987d3402b777dfaSHA1: 0bbdcd4173bfafede77339d638cfb9c74bccf957ANALYSIS DATE: 2022-10-21T16:21:03ZTTPS: T1130, T1112, T1060, T1222,...

Malware Analysis – persistence – a17d57f69b585a9af21e3ad4751b8047

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: a17d57f69b585a9af21e3ad4751b8047SHA1: fb6090d22df4eefd39153b69ab699acee762d5e0ANALYSIS DATE: 2022-10-21T16:20:46ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – 0730e83e8eb11be6f0fbec767a019dce

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 0730e83e8eb11be6f0fbec767a019dceSHA1: a57fed25aed84a8fefb5b0aec9d8aec52d8edb2cANALYSIS DATE: 2022-10-21T16:20:57ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – ransomware – c8bd518dd425e24d3b578ca184d7c90e

October 21, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c8bd518dd425e24d3b578ca184d7c90eSHA1: 0daf5073589b94194042a59b31dd9716a71f86feANALYSIS DATE: 2022-10-21T16:20:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

CISA: Cisco Releases Security Update for Cisco Identity Services Engine

October 21, 2022

Cisco Releases Security Update for Cisco Identity Services Engine Cisco has released a security update to address vulnerabilities affecting Cisco...

Malware Analysis – smokeloader – 63432d6ad5779ea84f3cc02914b27ad1

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 63432d6ad5779ea84f3cc02914b27ad1SHA1: 460c1eea03a2244e91522e55f6ccbcbb1957a98eANALYSIS DATE: 2022-10-21T16:21:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dharma – 1b388741ab70e4898b198d761b876e21

October 21, 2022

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 1b388741ab70e4898b198d761b876e21SHA1: d0d0ddb943c8dfab4377923875b6fec293f424cdANALYSIS DATE: 2022-10-21T16:40:12ZTTPS: T1060, T1112, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – 1e7428a5338a36f3139142eea4cd7501

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1e7428a5338a36f3139142eea4cd7501SHA1: 665b0fee184d48456b10ed478a212f05c41c9e8dANALYSIS DATE: 2022-10-21T16:21:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 6704beef0806f273511c7593433ac6f3

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6704beef0806f273511c7593433ac6f3SHA1: d89e660135ba404bba24c2b8fe41b811f531ab46ANALYSIS DATE: 2022-10-21T16:37:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

CISA adds Linux kernel flaw CVE-2021-3493 to its Known Exploited Vulnerabilities Catalog

October 21, 2022

CISA added a Linux kernel vulnerability, tracked as CVE-2021-3493, to its Known Exploited Vulnerabilities Catalog. The U.S. Cybersecurity and Infrastructure Security...

MHDDoS – DDoS Attack Script With 56 Methods

October 21, 2022

OVH | Bypass OVH RHEX | Random HEX STOMP | Bypass chk_captcha STRESS | Send HTTP Packet With High Byte...

threatintel

Malware Analysis – ransomware – 870172f3804834a399be0c291cecc756

Malware Analysis – discovery – 0c5a449950cd909f196542173a5dd3fc

Malware Analysis – lockbit – ef4a5d286011e8cd66514fa07ac99a29

Malware Analysis – discovery – 8c3ce9c090bd9fa2be2375904e042fe4

Malware Analysis – chaos – 2d4cbbfab9d173a12d9174130f7bcafb

Malware Analysis – djvu – b57fa6fca0cff4f7612b9ff9f95c8805

Malware Analysis – persistence – 6f66102d811e4103ccfed34ec1baab4a

Malware Analysis – djvu – 07dd31fa45db1cc31252b872abc8c7af

Malware Analysis – ransomware – a17412928dcd361f5e5da505949af250

Malware Analysis – xorist – 177068f72d69a4594bc3721fc9c1d6f0

Malware Analysis – djvu – 49ade3a18ead1ef1a4d92fb85605275c

Malware Analysis – persistence – d9d9419893fff428ee7efbeb334caa79

Malware Analysis – evasion – 10eb8999dd0c04774fb0998f80387dc0

Malware Analysis – djvu – 456ba4280563e40da987d3402b777dfa

Malware Analysis – persistence – a17d57f69b585a9af21e3ad4751b8047

Malware Analysis – persistence – 0730e83e8eb11be6f0fbec767a019dce

Malware Analysis – ransomware – c8bd518dd425e24d3b578ca184d7c90e

CISA: Cisco Releases Security Update for Cisco Identity Services Engine

Malware Analysis – smokeloader – 63432d6ad5779ea84f3cc02914b27ad1

Malware Analysis – dharma – 1b388741ab70e4898b198d761b876e21

Malware Analysis – smokeloader – 1e7428a5338a36f3139142eea4cd7501

Malware Analysis – evasion – 6704beef0806f273511c7593433ac6f3

CISA adds Linux kernel flaw CVE-2021-3493 to its Known Exploited Vulnerabilities Catalog

MHDDoS – DDoS Attack Script With 56 Methods

Cobalt Strike Beacon Detected – 106[.]75[.]247[.]91:80

Cobalt Strike Beacon Detected – 162[.]244[.]24[.]30:80

Cobalt Strike Beacon Detected – 8[.]153[.]97[.]202:88

Cobalt Strike Beacon Detected – 47[.]121[.]190[.]121:81

Cobalt Strike Beacon Detected – 18[.]183[.]60[.]128:80

You may have missed