threatintel

Malware Analysis – djvu – cb404fc3a8a024240f2804dd5128ff6c

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: cb404fc3a8a024240f2804dd5128ff6cSHA1: b882d72fab44002a7a7b1c05abdef03badb3f9b8ANALYSIS...

CISA: CISA Requests for Comment on Microsoft 365 Security Configuration Baselines

October 20, 2022

CISA Requests for Comment on Microsoft 365 Security Configuration Baselines CISA has issued requests for comment (RFCs) on eight Microsoft...

CISA: Mozilla Releases Security Updates for Firefox

October 20, 2022

Mozilla Releases Security Updates for Firefox Mozilla has released security updates to address vulnerabilities in Firefox ESR and Firefox. An attacker could...

Internet disruptions observed as Russia targets critical infrastructure in Ukraine

October 20, 2022

While the Russian army is conducting coordinated missile and drone strikes in Ukraine experts observed Internet disruptions in the country....

PartyLoud – A Simple Tool To Generate Fake Web Browsing And Mitigate Tracking

October 20, 2022

PartyLoud is a highly configurable and straightforward free tool that helps you prevent tracking directly from your linux terminal, no...

Malware Analysis – snatch – 2fa3c5b2e6a0c465045fe8dd7f55dd9a

October 20, 2022

Score: 10 MALWARE FAMILY: snatchTAGS:family:snatch, ransomware, spyware, stealer, upxMD5: 2fa3c5b2e6a0c465045fe8dd7f55dd9aSHA1: 1e6ea91491804da44db10be25bd1ea36baa0b362ANALYSIS DATE: 2022-10-20T08:15:19ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 161d5d74281ab0315310fc0ba345d7f3

October 20, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 161d5d74281ab0315310fc0ba345d7f3SHA1: 0031fe55a758188fb7f1743c0a3b4b6426d9464bANALYSIS DATE: 2022-10-20T08:00:22ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Black Basta Ransomware Victim: ESSICKAIR

October 20, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: METASYS

October 20, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: A G Equipment Company

October 20, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: TSC

October 20, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – phobos – 3f37b06e74816784da1e831a340f381b

October 20, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomwareMD5: 3f37b06e74816784da1e831a340f381bSHA1: dc0a75381841eb844fe2efbcd9624b66309de690ANALYSIS DATE: 2022-10-20T08:15:35ZTTPS: T1490, T1059, T1107, T1060, T1112, T1031 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 4ce7edb3a966f0921ad4531008ac38a2

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4ce7edb3a966f0921ad4531008ac38a2SHA1: 34b59085def8dd808add17dbf4639784746079b0ANALYSIS DATE: 2022-10-20T08:17:54ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – ransomware – ce36475e41157b1187801d6b663ab744

October 20, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ce36475e41157b1187801d6b663ab744SHA1: 70a4c1e77ab8c2de2cdf928dabd7fedfbd7a41c4ANALYSIS DATE: 2022-10-20T08:15:26ZTTPS: T1059, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – fcf60247b76ebd52d7a265434e57619a

October 20, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: fcf60247b76ebd52d7a265434e57619aSHA1: 08f9aafc93253a657890230a15e7ef98ad607c44ANALYSIS DATE: 2022-10-20T08:15:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – b0b76a11cd7740660bf9578d391b3ec2

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: b0b76a11cd7740660bf9578d391b3ec2SHA1: 788a8e188d94f04904abc97ae926f424768f8729ANALYSIS DATE: 2022-10-20T08:42:00ZTTPS:...

Malware Analysis – djvu – b7bc860cee7201e0c810642890a03246

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b7bc860cee7201e0c810642890a03246SHA1: d9edc9d61baf9d8cad3f840bba699ffd9219cce0ANALYSIS DATE: 2022-10-20T08:18:24ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – wannacry – 5ba23e04ccf1eef1456abdff691fb2aa

October 20, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 5ba23e04ccf1eef1456abdff691fb2aaSHA1: dcce86681d9e061263584b494ce6bc0f2ddec264ANALYSIS DATE: 2022-10-20T08:20:20ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – df19e7599e4f0c5e3f59d0e8a5ac3b23

October 20, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: df19e7599e4f0c5e3f59d0e8a5ac3b23SHA1: f9c2dcff2e4dc1cf9d7ca098457af1080261df2cANALYSIS DATE: 2022-10-20T08:40:15ZTTPS: T1012, T1120, T1082, T1107, T1490, T1112, T1088, T1089, T1057,...

Malware Analysis – smokeloader – 463484338d38a607293add6cbb3e00a7

October 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 463484338d38a607293add6cbb3e00a7SHA1: 2f1886433a8d9ddae76c307804390f3078b2f19eANALYSIS DATE: 2022-10-20T08:42:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – e23c95d91c7786c48e5273833610046f

October 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e23c95d91c7786c48e5273833610046fSHA1: cafcb78b479773cb1ddd5dfeeb3861e967a3772cANALYSIS DATE: 2022-10-20T09:02:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 81d8155a7b79464fc7a3d44e96cf9434

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 81d8155a7b79464fc7a3d44e96cf9434SHA1: 9646e3aa9fec2f8ff9628901850b30cd06f23d8dANALYSIS DATE: 2022-10-20T09:04:16ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – 9a6c2e678306a8ce57170cb9a55bbada

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9a6c2e678306a8ce57170cb9a55bbadaSHA1: ea8b4aca2b630252f5751984708285476ba89df2ANALYSIS DATE: 2022-10-20T09:08:13ZTTPS: T1060, T1112, T1082, T1005,...

Cobalt Stike Beacon Detected – 91[.]213[.]50[.]75:80

October 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

threatintel

Malware Analysis – djvu – cb404fc3a8a024240f2804dd5128ff6c

CISA: CISA Requests for Comment on Microsoft 365 Security Configuration Baselines

CISA: Mozilla Releases Security Updates for Firefox

Internet disruptions observed as Russia targets critical infrastructure in Ukraine

PartyLoud – A Simple Tool To Generate Fake Web Browsing And Mitigate Tracking

Malware Analysis – snatch – 2fa3c5b2e6a0c465045fe8dd7f55dd9a

Malware Analysis – ransomware – 161d5d74281ab0315310fc0ba345d7f3

Black Basta Ransomware Victim: ESSICKAIR

Black Basta Ransomware Victim: METASYS

Black Basta Ransomware Victim: A G Equipment Company

Black Basta Ransomware Victim: TSC

Malware Analysis – phobos – 3f37b06e74816784da1e831a340f381b

Malware Analysis – djvu – 4ce7edb3a966f0921ad4531008ac38a2

Malware Analysis – ransomware – ce36475e41157b1187801d6b663ab744

Malware Analysis – ransomware – fcf60247b76ebd52d7a265434e57619a

Malware Analysis – djvu – b0b76a11cd7740660bf9578d391b3ec2

Malware Analysis – djvu – b7bc860cee7201e0c810642890a03246

Malware Analysis – wannacry – 5ba23e04ccf1eef1456abdff691fb2aa

Malware Analysis – evasion – df19e7599e4f0c5e3f59d0e8a5ac3b23

Malware Analysis – smokeloader – 463484338d38a607293add6cbb3e00a7

Malware Analysis – smokeloader – e23c95d91c7786c48e5273833610046f

Malware Analysis – djvu – 81d8155a7b79464fc7a3d44e96cf9434

Malware Analysis – djvu – 9a6c2e678306a8ce57170cb9a55bbada

Cobalt Stike Beacon Detected – 91[.]213[.]50[.]75:80

[AKIRA] – Ransomware Victim: Fickling & Company

[RANSOMHUB] – Ransomware Victim: www[.]hexosys[.]com

[AKIRA] – Ransomware Victim: Callico Distributors, Inc[.]

[AKIRA] – Ransomware Victim: Safe-Strap Company, LLC

[AKIRA] – Ransomware Victim: Pacific Honda Company

You may have missed