threatintel

Malware Analysis – evasion – 6c87c3bbdb17a4716e668c2b78db16c0

October 12, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6c87c3bbdb17a4716e668c2b78db16c0SHA1: e3de17df8e20cfc37bcd18233cdc103278d8d250ANALYSIS DATE: 2022-10-11T18:59:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 1b4149c637c925082ee78dfdfd322210

October 12, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 1b4149c637c925082ee78dfdfd322210SHA1: 972515af63c02ec38feff8454ab3e42c5c2bbfa6ANALYSIS DATE: 2022-10-11T19:30:38ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 2211f6a74130c2974f66dc7cc2145df0

October 12, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 2211f6a74130c2974f66dc7cc2145df0SHA1: 175e8955c04f0556d60859f460c22d4aea47a8aeANALYSIS DATE: 2022-10-11T18:46:42ZTTPS: T1060, T1112, T1082, T1088, T1089, T1158,...

BlackCat/ALPHV Ransomware Victim: Midwest Petroleum

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malware Analysis – evasion – c850f942ccf6e45230169cc4bd9eb5c8

October 12, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: c850f942ccf6e45230169cc4bd9eb5c8SHA1: 51c647e2b150e781bd1910cac4061a2cee1daf89ANALYSIS DATE: 2022-10-12T02:08:47ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – 056d4e0dee2ed3bae61a3f448d4a079c

October 12, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 056d4e0dee2ed3bae61a3f448d4a079cSHA1: 43a23cfc4fd5ae9b41f20734ff78d845254fe45bANALYSIS DATE: 2022-10-11T19:58:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 185fba63c25db9d2d63cd4ce519c35b7

October 12, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomware, spyware, stealer, upxMD5: 185fba63c25db9d2d63cd4ce519c35b7SHA1: c4d034ede11dcd493ee28f7fc632a4795d7bf665ANALYSIS DATE: 2022-10-11T19:55:02ZTTPS: T1057, T1158, T1112, T1005, T1081, T1107, T1490,...

Malware Analysis – djvu – 8f7da1f9d1716d1850448b0dcb52c03f

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8f7da1f9d1716d1850448b0dcb52c03fSHA1: ccd7d15c3f0b57ee1a6cfd5e75505c768d4c445fANALYSIS DATE: 2022-10-12T02:10:46ZTTPS: T1005, T1081, T1082, T1053,...

BlackCat/ALPHV Ransomware Victim: Pinnacle Incorporated

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Clarion Communication Management Ltd

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Simex Defence Inc

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Knoll

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malware Analysis – spyware – 644399a0aff07bd4f7dc1eb5aa5c0236

October 12, 2022

Score: 8 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 644399a0aff07bd4f7dc1eb5aa5c0236SHA1: 243f1f7bb95af8d3c44a270772f408c6febb06afANALYSIS DATE: 2022-10-12T02:30:33ZTTPS: T1012, T1082, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 21bc1c5e98d4bf41365a44e88086c31f

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 21bc1c5e98d4bf41365a44e88086c31fSHA1: 9ecb76a713e8f29541766ea894bc0c62fadc7424ANALYSIS DATE: 2022-10-12T03:39:07ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – f24080143671873e32f7c8ec1b118208

October 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f24080143671873e32f7c8ec1b118208SHA1: 303041ee15dd2f2e65d8a9989a7477a709e95ec8ANALYSIS DATE: 2022-10-12T03:06:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – e808bb23350d08b14a9119b692c8ee58

October 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e808bb23350d08b14a9119b692c8ee58SHA1: 6aa51612791dee2862fe36cab58b1bbfa4513df9ANALYSIS DATE: 2022-10-12T02:32:58ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

BlackCat/ALPHV Ransomware Victim: The Hibbert Group

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Deutsche Saatveredelung AG

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Home Dynamix

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Notos Com

October 12, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malware Analysis – ransomware – 725475ddc9e0b4faa9bbc1fdb10f85d2

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 725475ddc9e0b4faa9bbc1fdb10f85d2SHA1: cf772b4bab641ba2245b03423ac385b0691d567eANALYSIS DATE: 2022-10-12T03:40:05ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – ec7478f1351f6452b6e15d14217a3a62

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ec7478f1351f6452b6e15d14217a3a62SHA1: 3dfa5c4361d89807a45ba6e60dfe8fe6a167e00aANALYSIS DATE: 2022-10-12T03:39:33ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 8c9c8c78ef28d02eef8264809cec0f11

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8c9c8c78ef28d02eef8264809cec0f11SHA1: f767f65d272ac322dd2c6a6a075f216aece2a1b0ANALYSIS DATE: 2022-10-12T03:40:09ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9ab7e303b8526e80304d3efd4e9ef066

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9ab7e303b8526e80304d3efd4e9ef066SHA1: a20e4f6e4f6a72f65885b562bd13c2648954d5b1ANALYSIS DATE: 2022-10-12T03:40:09ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

threatintel

Malware Analysis – evasion – 6c87c3bbdb17a4716e668c2b78db16c0

Malware Analysis – evasion – 1b4149c637c925082ee78dfdfd322210

Malware Analysis – evasion – 2211f6a74130c2974f66dc7cc2145df0

BlackCat/ALPHV Ransomware Victim: Midwest Petroleum

Malware Analysis – evasion – c850f942ccf6e45230169cc4bd9eb5c8

Malware Analysis – evasion – 056d4e0dee2ed3bae61a3f448d4a079c

Malware Analysis – evasion – 185fba63c25db9d2d63cd4ce519c35b7

Malware Analysis – djvu – 8f7da1f9d1716d1850448b0dcb52c03f

BlackCat/ALPHV Ransomware Victim: Pinnacle Incorporated

BlackCat/ALPHV Ransomware Victim: Clarion Communication Management Ltd

BlackCat/ALPHV Ransomware Victim: Simex Defence Inc

BlackCat/ALPHV Ransomware Victim: Knoll

Malware Analysis – spyware – 644399a0aff07bd4f7dc1eb5aa5c0236

Malware Analysis – ransomware – 21bc1c5e98d4bf41365a44e88086c31f

Malware Analysis – smokeloader – f24080143671873e32f7c8ec1b118208

Malware Analysis – smokeloader – e808bb23350d08b14a9119b692c8ee58

BlackCat/ALPHV Ransomware Victim: The Hibbert Group

BlackCat/ALPHV Ransomware Victim: Deutsche Saatveredelung AG

BlackCat/ALPHV Ransomware Victim: Home Dynamix

BlackCat/ALPHV Ransomware Victim: Notos Com

Malware Analysis – ransomware – 725475ddc9e0b4faa9bbc1fdb10f85d2

Malware Analysis – ransomware – ec7478f1351f6452b6e15d14217a3a62

Malware Analysis – ransomware – 8c9c8c78ef28d02eef8264809cec0f11

Malware Analysis – ransomware – 9ab7e303b8526e80304d3efd4e9ef066

CISA: CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Releases Nine Industrial Control Systems Advisories

CISA: CISA Partners with ASD’s ACSC, CCCS, NCSC-UK, and Other International and US Organizations to Release Guidance on Edge Devices

You may have missed