threatintel

Malware Analysis – danabot – f43ac18b5edd49c9c4fe6620e17220ac

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: f43ac18b5edd49c9c4fe6620e17220acSHA1: ad94aa6c2447546e65063c9d453304ca1b5547b7ANALYSIS...

Malware Analysis – evasion – f9a6cefa9b80c8c82426b4f43c8386a7

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, themida, trojan, upxMD5: f9a6cefa9b80c8c82426b4f43c8386a7SHA1: 28fa185b03547f8441a43f1a4e91b961f5ad6bb8ANALYSIS DATE: 2022-10-21T21:55:17ZTTPS: T1012, T1120, T1082, T1497 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 1784b275a3aa4f0e37ca55fa4eee6a50

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 1784b275a3aa4f0e37ca55fa4eee6a50SHA1: 5b2497dff78037fe8cef29498e9f8579c1f94a73ANALYSIS DATE: 2022-10-21T22:20:24ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – discovery – f01771b29abf7e8498a428c2d53bffac

October 22, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: f01771b29abf7e8498a428c2d53bffacSHA1: 5dcc92ce9101bce9d807b09d682e2e80b0087271ANALYSIS DATE: 2022-10-21T22:34:38ZTTPS: T1012, T1082, T1120, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Infographic: How CNAPP Consolidate Cybersecurity Tools

October 21, 2022

A cloud-native application protection platform (CNAPP) consolidates your security tools, helping development, DevOps, cloud, and security teams sort each piece...

Experts warn of CVE-2022-42889 Text4Shell exploit attempts

October 21, 2022

Wordfence researchers warn of exploitation attempts targeting the recently disclosed flaw in Apache Commons Text dubbed Text4Shell. Experts at WordPress security firm...

CISA: #StopRansomware: Daixin Team

October 21, 2022

#StopRansomware: Daixin Team CISA, the Federal Bureau of Investigation (FBI), and the Department of Health and Human Services (HHS) have...

Malware Analysis – djvu – d9a45cad09b06bb232c0050fb4263e4f

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d9a45cad09b06bb232c0050fb4263e4fSHA1: c90823242a31c83a49f2c161f7920cae1e115218ANALYSIS DATE: 2022-10-21T14:14:42ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – evasion – 736c1b70cd49fc72e575a0fb4dacaed0

October 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 736c1b70cd49fc72e575a0fb4dacaed0SHA1: f1462e828edd6607c229c6f98c61f85684117f63ANALYSIS DATE: 2022-10-21T07:09:18ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 437b022ea640e3f2ef6dffa5f0b58606

October 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 437b022ea640e3f2ef6dffa5f0b58606SHA1: b68a8a1658c2ae6cff738178ced31db7e2cafe63ANALYSIS DATE: 2022-10-21T06:54:00ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – db2b87503b2f76ef39660af0903186f6

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: db2b87503b2f76ef39660af0903186f6SHA1: 7a793b7930b4988d42e0b5e5d75d734ce3738e3eANALYSIS DATE: 2022-10-21T14:20:44ZTTPS: T1012, T1060, T1112, T1082,...

Malware Analysis – djvu – 8d18e31cf34a906ab2cea42d14aad351

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 8d18e31cf34a906ab2cea42d14aad351SHA1: 65607a572919893e596dcf37fd25560ec1d1d058ANALYSIS DATE: 2022-10-21T14:38:13ZTTPS: T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 6958fc7326e0893ae5fc204d74217c9d

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6958fc7326e0893ae5fc204d74217c9dSHA1: 2f14c70a7b4be2b978389aa6868d74d9fd20ae30ANALYSIS DATE: 2022-10-21T14:40:23ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – ransomware – 870172f3804834a399be0c291cecc756

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 870172f3804834a399be0c291cecc756SHA1: 1272fddefcda82716aa71c89d7d925a8c0e4f31fANALYSIS DATE: 2022-10-21T14:40:17ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – discovery – 0c5a449950cd909f196542173a5dd3fc

October 21, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 0c5a449950cd909f196542173a5dd3fcSHA1: c80d67f53718354107dc90b8bd5f251d4db03732ANALYSIS DATE: 2022-10-21T15:26:52ZTTPS: T1012, T1082, T1060, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – lockbit – ef4a5d286011e8cd66514fa07ac99a29

October 21, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, evasion, persistence, ransomwareMD5: ef4a5d286011e8cd66514fa07ac99a29SHA1: 8458579dd79056cdddbab67f3c82832acd00ab6dANALYSIS DATE: 2022-10-21T15:00:46ZTTPS: T1490, T1059, T1107, T1060, T1112, T1082, T1012, T1120,...

Malware Analysis – discovery – 8c3ce9c090bd9fa2be2375904e042fe4

October 21, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 8c3ce9c090bd9fa2be2375904e042fe4SHA1: 1d14f719e46cd5d76c05ede355e7f11eee2c07c3ANALYSIS DATE: 2022-10-21T15:17:36ZTTPS: T1082, T1060, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – 2d4cbbfab9d173a12d9174130f7bcafb

October 21, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomwareMD5: 2d4cbbfab9d173a12d9174130f7bcafbSHA1: 6b652c8b623f16d1006f7f116f6fc3dad8ea7ea7ANALYSIS DATE: 2022-10-21T15:00:07ZTTPS: T1490, T1059, T1107, T1082, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – b57fa6fca0cff4f7612b9ff9f95c8805

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b57fa6fca0cff4f7612b9ff9f95c8805SHA1: df083f0b4a89dd9964db28685889a7a2c32858beANALYSIS DATE: 2022-10-21T15:36:39ZTTPS: T1005, T1081, T1222, T1012,...

Malware Analysis – persistence – 6f66102d811e4103ccfed34ec1baab4a

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6f66102d811e4103ccfed34ec1baab4aSHA1: f2a6a1e87f8d235eebfd457cab125423082fb49dANALYSIS DATE: 2022-10-21T15:40:23ZTTPS: T1091, T1060, T1112, T1005, T1081, T1082, T1107, T1490...

Malware Analysis – djvu – 07dd31fa45db1cc31252b872abc8c7af

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 07dd31fa45db1cc31252b872abc8c7afSHA1: 9643a41fef4af18b35b53c6671627debd88ec289ANALYSIS DATE: 2022-10-21T15:51:19ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – ransomware – a17412928dcd361f5e5da505949af250

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a17412928dcd361f5e5da505949af250SHA1: 155f2671b5311cde3d946e4b0e5685f1f9f5ea69ANALYSIS DATE: 2022-10-21T15:40:27ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 10eb8999dd0c04774fb0998f80387dc0

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojan, upxMD5: 10eb8999dd0c04774fb0998f80387dc0SHA1: 7e53b412a5ee3a9914be897ff6454c04993c4b36ANALYSIS DATE: 2022-10-21T16:09:34ZTTPS: T1082, T1112, T1031, T1004, T1088, T1089,...

Malware Analysis – xorist – 177068f72d69a4594bc3721fc9c1d6f0

October 21, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 177068f72d69a4594bc3721fc9c1d6f0SHA1: a24fe2857a2386e2413afa1c7476110cfa7319b9ANALYSIS DATE: 2022-10-21T16:09:32ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

threatintel

Malware Analysis – danabot – f43ac18b5edd49c9c4fe6620e17220ac

Malware Analysis – evasion – f9a6cefa9b80c8c82426b4f43c8386a7

Malware Analysis – persistence – 1784b275a3aa4f0e37ca55fa4eee6a50

Malware Analysis – discovery – f01771b29abf7e8498a428c2d53bffac

Infographic: How CNAPP Consolidate Cybersecurity Tools

Experts warn of CVE-2022-42889 Text4Shell exploit attempts

CISA: #StopRansomware: Daixin Team

Malware Analysis – djvu – d9a45cad09b06bb232c0050fb4263e4f

Malware Analysis – evasion – 736c1b70cd49fc72e575a0fb4dacaed0

Malware Analysis – evasion – 437b022ea640e3f2ef6dffa5f0b58606

Malware Analysis – djvu – db2b87503b2f76ef39660af0903186f6

Malware Analysis – djvu – 8d18e31cf34a906ab2cea42d14aad351

Malware Analysis – djvu – 6958fc7326e0893ae5fc204d74217c9d

Malware Analysis – ransomware – 870172f3804834a399be0c291cecc756

Malware Analysis – discovery – 0c5a449950cd909f196542173a5dd3fc

Malware Analysis – lockbit – ef4a5d286011e8cd66514fa07ac99a29

Malware Analysis – discovery – 8c3ce9c090bd9fa2be2375904e042fe4

Malware Analysis – chaos – 2d4cbbfab9d173a12d9174130f7bcafb

Malware Analysis – djvu – b57fa6fca0cff4f7612b9ff9f95c8805

Malware Analysis – persistence – 6f66102d811e4103ccfed34ec1baab4a

Malware Analysis – djvu – 07dd31fa45db1cc31252b872abc8c7af

Malware Analysis – ransomware – a17412928dcd361f5e5da505949af250

Malware Analysis – evasion – 10eb8999dd0c04774fb0998f80387dc0

Malware Analysis – xorist – 177068f72d69a4594bc3721fc9c1d6f0

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases Nine Industrial Control Systems Advisories

CISA: CISA Partners with ASD’s ACSC, CCCS, NCSC-UK, and Other International and US Organizations to Release Guidance on Edge Devices

CISA: CISA Releases Six Industrial Control Systems Advisories

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

You may have missed