threatintel

Malware Analysis – evasion – 155316526ff476698494e90efc1127bc

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasionMD5: 155316526ff476698494e90efc1127bcSHA1: be7bba8dc417a5cfa665d647ce7bafabb67a0d00ANALYSIS DATE: 2022-10-21T10:51:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – ac32ffaa379aed78dcc11ea74fbdfcfe

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: ac32ffaa379aed78dcc11ea74fbdfcfeSHA1: 7555f5c5e70d3b33a35e9db9a6cb5554b38ad9f3ANALYSIS DATE: 2022-10-21T10:51:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 50a9624b74624f99284b417b732b82af

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasionMD5: 50a9624b74624f99284b417b732b82afSHA1: 628d0bf29626fca8b66053597e310b2f842172d3ANALYSIS DATE: 2022-10-21T10:52:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 86da3a7378e17b51ba83ba3333e86a32

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 86da3a7378e17b51ba83ba3333e86a32SHA1: e09c6fdc034da5c5cd1656a7b3b49116db575ac1ANALYSIS DATE: 2022-10-21T10:52:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – fbd0afe5bd3d0d61feb21680b304d7ae

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fbd0afe5bd3d0d61feb21680b304d7aeSHA1: 2c61d60f8b1b52688b5642f646c89dad124f466eANALYSIS DATE: 2022-10-21T10:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – cc88f21406eaeed70a890f53e57c98b6

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: cc88f21406eaeed70a890f53e57c98b6SHA1: 1d497ae9e273441f1e800d3efafbf50119dd3242ANALYSIS DATE: 2022-10-21T10:52:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – 25a65cbfc9d34f5367acb5ea2a32e3ef

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 25a65cbfc9d34f5367acb5ea2a32e3efSHA1: 4bbea845641b884f5e07005881caa3a157f3ce55ANALYSIS DATE: 2022-10-21T10:52:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – c4951ce5e946596e0356979341e6f240

October 21, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c4951ce5e946596e0356979341e6f240SHA1: 530e602b959009f80b5161aeb0eaec7c75dfd826ANALYSIS DATE: 2022-10-21T10:54:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 43bd113a0952172bcba57055f5a707bb

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 43bd113a0952172bcba57055f5a707bbSHA1: accdbdc724fbe4a45c4de5f9f0bdfc369e8fb35dANALYSIS DATE: 2022-10-21T10:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 800687c66b176288d45e1a1b2fd59009

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 800687c66b176288d45e1a1b2fd59009SHA1: 386b050115a3624751c825252931fe333d8cdcd4ANALYSIS DATE: 2022-10-21T10:56:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – d199c202beb4380e2f675e93c36cf0f4

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: d199c202beb4380e2f675e93c36cf0f4SHA1: 94037ffde778e4f0c49bc357d8e84a991f3baf6fANALYSIS DATE: 2022-10-21T10:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

News URSNIF variant doesn’t support banking features

October 21, 2022

A new variant of the popular Ursnif malware is used as a backdoor to deliver next-stage payloads and steal sensitive...

LockBit 3.0 Ransomware Victim: eureka-puzzle[.]eu

October 21, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: eeckman[.]eu

October 21, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Healthcare system Advocate Aurora Health data breach potentially impacted 3M patients

October 21, 2022

Healthcare system Advocate Aurora Health (AAH) disclosed a data breach that exposed the personal data of 3,000,000 patients. The US-based...

Malware Analysis – persistence – 67539d1128a73ced00a692b4f3bdd401

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 67539d1128a73ced00a692b4f3bdd401SHA1: d7a945d19f1c6d2c9cd8c27ee81e5f0a76579068ANALYSIS DATE: 2022-10-21T02:00:27ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – evasion – 7566b7d7a5839725c9c64961a0c8b920

October 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 7566b7d7a5839725c9c64961a0c8b920SHA1: 1c580b6f7f3276e68cbccaf4e0857ec490fe6775ANALYSIS DATE: 2022-10-20T06:11:45ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – cf711afc5eca3498429bb1422b41d7a5

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: cf711afc5eca3498429bb1422b41d7a5SHA1: 364304eb925d2702c123736c16ab07e9d10dcf6dANALYSIS DATE: 2022-10-21T01:58:03ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – smokeloader – e3ab48a33e6c51a9585255a0a0170830

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e3ab48a33e6c51a9585255a0a0170830SHA1: 278f874f675777f9b22837202eba8ac4164835eaANALYSIS DATE: 2022-10-21T02:13:09ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – d01e1338a1c7a2aa61733ef47a7ac35d

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d01e1338a1c7a2aa61733ef47a7ac35dSHA1: 966185c9056e67418f987dbc892d948e908f1802ANALYSIS DATE: 2022-10-21T02:01:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 476635a30e84fa5142f3b0258807cdc1

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 476635a30e84fa5142f3b0258807cdc1SHA1: 48e256b43da8ae4a2dc4f788d1e8e60ba6a5efc3ANALYSIS DATE: 2022-10-21T02:05:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – d40382764d622393e1a1bb318c43b5e8

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d40382764d622393e1a1bb318c43b5e8SHA1: e3b59e16efdb0843e0e195dc67b305201602ee02ANALYSIS DATE: 2022-10-21T02:07:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – c629d6f58117d412173063ef636e6b65

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c629d6f58117d412173063ef636e6b65SHA1: 46c77ccde087080cb5ade178f10e813d48dac71bANALYSIS DATE: 2022-10-21T03:06:13ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – dd8ebe57e3ae851a6bc1c6b34067ea21

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dd8ebe57e3ae851a6bc1c6b34067ea21SHA1: 0a48af08cfcbebd2af414e4e0780608ae8885d4cANALYSIS DATE: 2022-10-21T02:48:11ZTTPS: T1005, T1081, T1012, T1082,...

threatintel

Malware Analysis – evasion – 155316526ff476698494e90efc1127bc

Malware Analysis – – ac32ffaa379aed78dcc11ea74fbdfcfe

Malware Analysis – evasion – 50a9624b74624f99284b417b732b82af

Malware Analysis – – 86da3a7378e17b51ba83ba3333e86a32

Malware Analysis – evasion – fbd0afe5bd3d0d61feb21680b304d7ae

Malware Analysis – evasion – cc88f21406eaeed70a890f53e57c98b6

Malware Analysis – – 25a65cbfc9d34f5367acb5ea2a32e3ef

Malware Analysis – ransomware – c4951ce5e946596e0356979341e6f240

Malware Analysis – – 43bd113a0952172bcba57055f5a707bb

Malware Analysis – smokeloader – 800687c66b176288d45e1a1b2fd59009

Malware Analysis – – d199c202beb4380e2f675e93c36cf0f4

News URSNIF variant doesn’t support banking features

LockBit 3.0 Ransomware Victim: eureka-puzzle[.]eu

LockBit 3.0 Ransomware Victim: eeckman[.]eu

Healthcare system Advocate Aurora Health data breach potentially impacted 3M patients

Malware Analysis – persistence – 67539d1128a73ced00a692b4f3bdd401

Malware Analysis – evasion – 7566b7d7a5839725c9c64961a0c8b920

Malware Analysis – djvu – cf711afc5eca3498429bb1422b41d7a5

Malware Analysis – smokeloader – e3ab48a33e6c51a9585255a0a0170830

Malware Analysis – smokeloader – d01e1338a1c7a2aa61733ef47a7ac35d

Malware Analysis – smokeloader – 476635a30e84fa5142f3b0258807cdc1

Malware Analysis – smokeloader – d40382764d622393e1a1bb318c43b5e8

Malware Analysis – smokeloader – c629d6f58117d412173063ef636e6b65

Malware Analysis – djvu – dd8ebe57e3ae851a6bc1c6b34067ea21

US-CERT Vulnerability Summary for the Week of March 3, 2025

[KAIROS] – Ransomware Victim: fredsalvuccicorp[.]com

[BABUK2] – Ransomware Victim: Mandarin[.]com[.]br By Babuk Locker 2[.]0

[AKIRA] – Ransomware Victim: Fickling & Company

[RANSOMHUB] – Ransomware Victim: www[.]hexosys[.]com

You may have missed