threatintel

Malware Analysis – wannacry – b3387f11fa7bc1251086e8907a8991f3

October 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: b3387f11fa7bc1251086e8907a8991f3SHA1: c7708c19abbbd9712fd2f228f2aacc71527b3911ANALYSIS DATE: 2022-10-14T14:01:07ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 268825329e04592f5f591be46a52dd53

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 268825329e04592f5f591be46a52dd53SHA1: c36396324df077b6e3f8eab90bed632857f9b7ccANALYSIS DATE: 2022-10-14T14:13:53ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – wannacry – c3ffd73826c8c31546f1d90b7dcb7f70

October 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: c3ffd73826c8c31546f1d90b7dcb7f70SHA1: 2924214e4467599dc00ef7f9d7cf10ac2c0c76c6ANALYSIS DATE: 2022-10-14T14:20:56ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 63213dd705a9cfdec2b9a46abe534a9b

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 63213dd705a9cfdec2b9a46abe534a9bSHA1: 879916d680a2e8f5b11157f2472edb167f3b677fANALYSIS DATE: 2022-10-14T14:20:11ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – d7469660e9ad438485bd924a6cebce85

October 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: d7469660e9ad438485bd924a6cebce85SHA1: f3144c0bd1251cb9a6f66342cb6cfd5a1560232bANALYSIS DATE: 2022-10-14T14:20:45ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 237fd4e4ba932c9255c16c030d712f5d

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 237fd4e4ba932c9255c16c030d712f5dSHA1: 1d84e276f7c1bb55224cef42cd414d848b779002ANALYSIS DATE: 2022-10-14T14:20:21ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – aaee141f3e0aa3f7c9c376f262b97b29

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: aaee141f3e0aa3f7c9c376f262b97b29SHA1: be78f4517d29c1117e3143a6687d8e8fbe84283dANALYSIS DATE: 2022-10-14T15:20:17ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – danabot – 8d1c8f19e9b43d1b413985f412ae00a6

October 14, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – – 653ee122709e45a162a2e9805d446a2e

October 14, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 653ee122709e45a162a2e9805d446a2eSHA1: 2f16d9e14c79d7e15fcb7204fceda2ce163802ecANALYSIS DATE: 2022-10-14T14:50:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 2055a04e632d1e5588b245b7cc8a52ac

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2055a04e632d1e5588b245b7cc8a52acSHA1: 9f458f97c995c6a38e179be9d0cd3e6726a48543ANALYSIS DATE: 2022-10-14T15:01:12ZTTPS: T1053, T1012, T1082, T1005,...

Malware Analysis – ransomware – 7b6d799c95a79ddfbc88cf22c6a40807

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7b6d799c95a79ddfbc88cf22c6a40807SHA1: a27e5ee122199eddccc6b0b2dc49de9a14e8d6c3ANALYSIS DATE: 2022-10-14T15:40:21ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – danabot – a02834d5e9f234a27480e7bc13a5ee95

October 14, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:vidar, botnet:517, banker, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5:...

Malware Analysis – ransomware – 86a6d2a60a39ead1e09ad35512710f80

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 86a6d2a60a39ead1e09ad35512710f80SHA1: 35b44dcaf8c7f291a5823d609aec557593f2d752ANALYSIS DATE: 2022-10-14T15:40:11ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 61b3785a83a8f28a1beddfbb41ef1059

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 61b3785a83a8f28a1beddfbb41ef1059SHA1: 66e1801238581a6d183a5c2b34159c5c9e6065bfANALYSIS DATE: 2022-10-14T15:38:19ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – b70ec686260b1821f07b44ed88dcd4e0

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b70ec686260b1821f07b44ed88dcd4e0SHA1: 9e3290d79406c87f905263a45eebfca4f8a6e7dbANALYSIS DATE: 2022-10-14T15:40:41ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4f2d1e4655d12d45efc26b1034034f9b

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4f2d1e4655d12d45efc26b1034034f9bSHA1: b2e1b3fef5c75a44902b984e2e7c8d9e143fc4a9ANALYSIS DATE: 2022-10-14T15:40:34ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9ce251bd921f81553ada59816d764cde

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9ce251bd921f81553ada59816d764cdeSHA1: 43d4199349762939428ad422dfd6eac420517f22ANALYSIS DATE: 2022-10-14T15:40:51ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4ebe2c03a302bcf4dee5d444101ee2d1

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4ebe2c03a302bcf4dee5d444101ee2d1SHA1: e84606b85239c8bc1580f60ed58f5e2706c52dafANALYSIS DATE: 2022-10-14T15:40:57ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 36f8a06ec4b02b186c2d8fa0b6be5609

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 36f8a06ec4b02b186c2d8fa0b6be5609SHA1: 393ff0a550ab21ea3d9ea61a6dc1d59d71de06c3ANALYSIS DATE:...

Malware Analysis – wannacry – f180d23ede98f53a8dffd109ed624e85

October 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: f180d23ede98f53a8dffd109ed624e85SHA1: 7755fe529f6c4ff88d3955269c9a1d49235f5a56ANALYSIS DATE: 2022-10-14T16:00:14ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – 52ffaf10efe8795445a3df86abd0ded2

October 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 52ffaf10efe8795445a3df86abd0ded2SHA1: c1daa480214146034e1bdb20286196246b7a7428ANALYSIS DATE: 2022-10-14T16:38:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 00e5b549f8b6c6d6920d35aa68f25b02

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 00e5b549f8b6c6d6920d35aa68f25b02SHA1: d87b52dcbee58fa8ce933e22b06a39ffcb78677aANALYSIS DATE: 2022-10-14T16:28:14ZTTPS: T1082, T1005, T1081, T1060,...

WIP19, a new Chinese APT targets IT Service Providers and Telcos

October 14, 2022

Chinese-speaking threat actor, tracked as WIP19, is targeting telecommunications and IT service providers in the Middle East and Asia. SentinelOne researchers...

CISA: CISA Releases RedEye: Red Team Campaign Visualization and Reporting Tool

October 14, 2022

CISA Releases RedEye: Red Team Campaign Visualization and Reporting Tool CISA has released RedEye, an interactive open-source analytic tool to...

threatintel

Malware Analysis – wannacry – b3387f11fa7bc1251086e8907a8991f3

Malware Analysis – djvu – 268825329e04592f5f591be46a52dd53

Malware Analysis – wannacry – c3ffd73826c8c31546f1d90b7dcb7f70

Malware Analysis – ransomware – 63213dd705a9cfdec2b9a46abe534a9b

Malware Analysis – wannacry – d7469660e9ad438485bd924a6cebce85

Malware Analysis – ransomware – 237fd4e4ba932c9255c16c030d712f5d

Malware Analysis – djvu – aaee141f3e0aa3f7c9c376f262b97b29

Malware Analysis – danabot – 8d1c8f19e9b43d1b413985f412ae00a6

Malware Analysis – – 653ee122709e45a162a2e9805d446a2e

Malware Analysis – djvu – 2055a04e632d1e5588b245b7cc8a52ac

Malware Analysis – ransomware – 7b6d799c95a79ddfbc88cf22c6a40807

Malware Analysis – danabot – a02834d5e9f234a27480e7bc13a5ee95

Malware Analysis – ransomware – 86a6d2a60a39ead1e09ad35512710f80

Malware Analysis – djvu – 61b3785a83a8f28a1beddfbb41ef1059

Malware Analysis – ransomware – b70ec686260b1821f07b44ed88dcd4e0

Malware Analysis – ransomware – 4f2d1e4655d12d45efc26b1034034f9b

Malware Analysis – ransomware – 9ce251bd921f81553ada59816d764cde

Malware Analysis – ransomware – 4ebe2c03a302bcf4dee5d444101ee2d1

Malware Analysis – djvu – 36f8a06ec4b02b186c2d8fa0b6be5609

Malware Analysis – wannacry – f180d23ede98f53a8dffd109ed624e85

Malware Analysis – smokeloader – 52ffaf10efe8795445a3df86abd0ded2

Malware Analysis – djvu – 00e5b549f8b6c6d6920d35aa68f25b02

WIP19, a new Chinese APT targets IT Service Providers and Telcos

CISA: CISA Releases RedEye: Red Team Campaign Visualization and Reporting Tool

[LYNX] – Ransomware Victim: Woodport Doors

[FUNKSEC] – Ransomware Victim: barilga[.]gov[.]mn

CVE Alert: CVE-2025-21133

CVE Alert: CVE-2025-21127

CVE Alert: CVE-2025-21134

You may have missed