threatintel

Malware Analysis – evasion – 10eb8999dd0c04774fb0998f80387dc0

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojan, upxMD5: 10eb8999dd0c04774fb0998f80387dc0SHA1: 7e53b412a5ee3a9914be897ff6454c04993c4b36ANALYSIS DATE: 2022-10-21T16:09:34ZTTPS: T1082, T1112, T1031, T1004, T1088, T1089,...

Malware Analysis – xorist – 177068f72d69a4594bc3721fc9c1d6f0

October 21, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 177068f72d69a4594bc3721fc9c1d6f0SHA1: a24fe2857a2386e2413afa1c7476110cfa7319b9ANALYSIS DATE: 2022-10-21T16:09:32ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 456ba4280563e40da987d3402b777dfa

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 456ba4280563e40da987d3402b777dfaSHA1: 0bbdcd4173bfafede77339d638cfb9c74bccf957ANALYSIS DATE: 2022-10-21T16:21:03ZTTPS: T1130, T1112, T1060, T1222,...

Malware Analysis – persistence – a17d57f69b585a9af21e3ad4751b8047

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: a17d57f69b585a9af21e3ad4751b8047SHA1: fb6090d22df4eefd39153b69ab699acee762d5e0ANALYSIS DATE: 2022-10-21T16:20:46ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – 0730e83e8eb11be6f0fbec767a019dce

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 0730e83e8eb11be6f0fbec767a019dceSHA1: a57fed25aed84a8fefb5b0aec9d8aec52d8edb2cANALYSIS DATE: 2022-10-21T16:20:57ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – ransomware – c8bd518dd425e24d3b578ca184d7c90e

October 21, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c8bd518dd425e24d3b578ca184d7c90eSHA1: 0daf5073589b94194042a59b31dd9716a71f86feANALYSIS DATE: 2022-10-21T16:20:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

CISA: Cisco Releases Security Update for Cisco Identity Services Engine

October 21, 2022

Cisco Releases Security Update for Cisco Identity Services Engine Cisco has released a security update to address vulnerabilities affecting Cisco...

Malware Analysis – smokeloader – 63432d6ad5779ea84f3cc02914b27ad1

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 63432d6ad5779ea84f3cc02914b27ad1SHA1: 460c1eea03a2244e91522e55f6ccbcbb1957a98eANALYSIS DATE: 2022-10-21T16:21:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dharma – 1b388741ab70e4898b198d761b876e21

October 21, 2022

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 1b388741ab70e4898b198d761b876e21SHA1: d0d0ddb943c8dfab4377923875b6fec293f424cdANALYSIS DATE: 2022-10-21T16:40:12ZTTPS: T1060, T1112, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – 1e7428a5338a36f3139142eea4cd7501

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1e7428a5338a36f3139142eea4cd7501SHA1: 665b0fee184d48456b10ed478a212f05c41c9e8dANALYSIS DATE: 2022-10-21T16:21:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 6704beef0806f273511c7593433ac6f3

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6704beef0806f273511c7593433ac6f3SHA1: d89e660135ba404bba24c2b8fe41b811f531ab46ANALYSIS DATE: 2022-10-21T16:37:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

CISA adds Linux kernel flaw CVE-2021-3493 to its Known Exploited Vulnerabilities Catalog

October 21, 2022

CISA added a Linux kernel vulnerability, tracked as CVE-2021-3493, to its Known Exploited Vulnerabilities Catalog. The U.S. Cybersecurity and Infrastructure Security...

MHDDoS – DDoS Attack Script With 56 Methods

October 21, 2022

OVH | Bypass OVH RHEX | Random HEX STOMP | Bypass chk_captcha STRESS | Send HTTP Packet With High Byte...

GUAC – A Google Open Source Project to secure software supply chain

October 21, 2022

Google launched the Graph for the Understanding Artifact Composition (GUAC) project, to secure the software supply chain. Google this week launched a...

Malware Analysis – evasion – 4a7c374dad91f035b53c883daa47c962

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4a7c374dad91f035b53c883daa47c962SHA1: 90f086c1cb3ea51cd6812013fb0882627421139cANALYSIS DATE: 2022-10-21T02:17:18ZTTPS: T1060, T1112, T1004, T1082, T1091, T1491, T1088, T1089,...

Malware Analysis – evasion – 1fc14f1b4c28868bd794c50bd750b931

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 1fc14f1b4c28868bd794c50bd750b931SHA1: 1d1ad3a831058f4946a8c63f7da73223e1a6c914ANALYSIS DATE: 2022-10-21T02:17:20ZTTPS: T1060, T1112, T1042, T1158, T1082, T1012, T1120, T1491,...

Malware Analysis – evasion – 4b0f8003abcc787d4efe43dd160d8e2b

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4b0f8003abcc787d4efe43dd160d8e2bSHA1: 9f0db3155862ea30b3c6e2ce9ccc43d4e28ecf58ANALYSIS DATE: 2022-10-21T02:17:25ZTTPS: T1082, T1012, T1120, T1060, T1112, T1042, T1088, T1089,...

Malware Analysis – evasion – 4c4b821ad0b7b56d3140642dd8b38130

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4c4b821ad0b7b56d3140642dd8b38130SHA1: 3813f159da1a1db846bdeef7908b9573d8a9a2bfANALYSIS DATE: 2022-10-21T02:17:27ZTTPS: T1012, T1120, T1082, T1060, T1112, T1088, T1089, T1091,...

Malware Analysis – evasion – 7c25d13bdb003c74b0aa93033c9d506d

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 7c25d13bdb003c74b0aa93033c9d506dSHA1: 1b1e69548ab251e9212e900050aa4f43c690442bANALYSIS DATE: 2022-10-21T02:17:22ZTTPS: T1491, T1112, T1060, T1082, T1004, T1042, T1490, T1091,...

Malware Analysis – chaos – 37fe2e312cff4d943402ecee7ecb6757

October 21, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: 37fe2e312cff4d943402ecee7ecb6757SHA1: d39d49c293c8289814b94d6dc5d1a9d61c2dbf39ANALYSIS DATE: 2022-10-21T08:20:07ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – – e94ed62a28a9fd6f714c3e29b3636788

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: e94ed62a28a9fd6f714c3e29b3636788SHA1: f79fd307847deb43025017da5821700d7d83bc3bANALYSIS DATE: 2022-10-21T08:24:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – wannacry – 6ebd19dc1ed9e9aac923dd481748a822

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, spyware, stealer, wormMD5: 6ebd19dc1ed9e9aac923dd481748a822SHA1: 6f521534713557b632def410cbba009cdb617da7ANALYSIS DATE: 2022-10-21T08:20:30ZTTPS: T1046, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 955a87720cab36806acf992685552830

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 955a87720cab36806acf992685552830SHA1: 79559db98b1530c2a29709114558a12669f8b9f0ANALYSIS DATE: 2022-10-21T08:29:00ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – surtr – 5409ee640663b8d1f520af46c1146c0e

October 21, 2022

Score: 10 MALWARE FAMILY: surtrTAGS:family:surtr, evasion, ransomware, upxMD5: 5409ee640663b8d1f520af46c1146c0eSHA1: 73eebd0dd94ce3d161a7f191196b8bcc354af55aANALYSIS DATE: 2022-10-21T08:20:23ZTTPS: T1490, T1059, T1107, T1485, T1082, T1012, T1120 ScoreMeaningExample10Known...

threatintel

Malware Analysis – evasion – 10eb8999dd0c04774fb0998f80387dc0

Malware Analysis – xorist – 177068f72d69a4594bc3721fc9c1d6f0

Malware Analysis – djvu – 456ba4280563e40da987d3402b777dfa

Malware Analysis – persistence – a17d57f69b585a9af21e3ad4751b8047

Malware Analysis – persistence – 0730e83e8eb11be6f0fbec767a019dce

Malware Analysis – ransomware – c8bd518dd425e24d3b578ca184d7c90e

CISA: Cisco Releases Security Update for Cisco Identity Services Engine

Malware Analysis – smokeloader – 63432d6ad5779ea84f3cc02914b27ad1

Malware Analysis – dharma – 1b388741ab70e4898b198d761b876e21

Malware Analysis – smokeloader – 1e7428a5338a36f3139142eea4cd7501

Malware Analysis – evasion – 6704beef0806f273511c7593433ac6f3

CISA adds Linux kernel flaw CVE-2021-3493 to its Known Exploited Vulnerabilities Catalog

MHDDoS – DDoS Attack Script With 56 Methods

GUAC – A Google Open Source Project to secure software supply chain

Malware Analysis – evasion – 4a7c374dad91f035b53c883daa47c962

Malware Analysis – evasion – 1fc14f1b4c28868bd794c50bd750b931

Malware Analysis – evasion – 4b0f8003abcc787d4efe43dd160d8e2b

Malware Analysis – evasion – 4c4b821ad0b7b56d3140642dd8b38130

Malware Analysis – evasion – 7c25d13bdb003c74b0aa93033c9d506d

Malware Analysis – chaos – 37fe2e312cff4d943402ecee7ecb6757

Malware Analysis – – e94ed62a28a9fd6f714c3e29b3636788

Malware Analysis – wannacry – 6ebd19dc1ed9e9aac923dd481748a822

Malware Analysis – djvu – 955a87720cab36806acf992685552830

Malware Analysis – surtr – 5409ee640663b8d1f520af46c1146c0e

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases Nine Industrial Control Systems Advisories

CISA: CISA Partners with ASD’s ACSC, CCCS, NCSC-UK, and Other International and US Organizations to Release Guidance on Edge Devices

CISA: CISA Releases Six Industrial Control Systems Advisories

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

You may have missed