threatintel

Malware Analysis – ransomware – e08ce5d0e0766ddb80540bf783a9488e

October 26, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e08ce5d0e0766ddb80540bf783a9488eSHA1: 4aeb2e764fc6f72c87af21a95ad4308e33851fc5ANALYSIS DATE: 2022-10-26T08:20:04ZTTPS: T1005, T1081, T1082, T1012, T1120, T1107, T1490 ScoreMeaningExample10Known badA...

Malware Analysis – ransomware – 73fc61bbec7230ef268be95246dbfa67

October 26, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 73fc61bbec7230ef268be95246dbfa67SHA1: d700c6548240a75fc8a0b72ac4ad2cca1b6d4fe5ANALYSIS DATE: 2022-10-26T08:21:04ZTTPS: T1012, T1120, T1082, T1005, T1081, T1107, T1490 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 897904a30b9f93342c41c7baccc0395e

October 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:fote, botnet:mario23_10, botnet:nam7, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – ransomware – e639e001fb263d44d896b16771277ce9

October 26, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e639e001fb263d44d896b16771277ce9SHA1: a0fb7a992b50da292ef5770630c139d58049388bANALYSIS DATE: 2022-10-26T08:21:44ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – wannacry – eea2153661910584cf63390ca3adb28b

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: eea2153661910584cf63390ca3adb28bSHA1: 1e90186e9054aec6bdce46ad2ccec11e164440eeANALYSIS DATE: 2022-10-26T09:40:20ZTTPS: T1046, T1158, T1222, T1082, T1005,...

Malware Analysis – djvu – 11a56eaa628aa4a2576a0e7fb15a52c7

October 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:google2, botnet:mario23_10, botnet:nam7, botnet:slovarik15btc, backdoor, collection, discovery, infostealer, persistence, ransomware,...

Malware Analysis – wannacry – 5535a78a4b4a483f5eeef222c4a142f0

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: 5535a78a4b4a483f5eeef222c4a142f0SHA1: 1697a46489e50c54520aa0bfc6f3663bbce12920ANALYSIS DATE: 2022-10-26T10:00:21ZTTPS: T1082, T1005, T1081, T1491, T1112,...

Malware Analysis – wannacry – eea571229a25bc2f5b59dce07c361cb2

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: eea571229a25bc2f5b59dce07c361cb2SHA1: b341437a1f94d645e5628d8491f068de1a049fb9ANALYSIS DATE: 2022-10-26T08:30:43ZTTPS: T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 124[.]221[.]248[.]119:6666

October 26, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 042fd0315eccd1810935b117f8c1f80d

October 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:mario23_10, botnet:nam7, botnet:slovarik15btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – discovery – 223a5331677dccb0d104c4ff1932a222

October 26, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 223a5331677dccb0d104c4ff1932a222SHA1: 08875300c7bc8cdfcfb714c221404773f1c7da57ANALYSIS DATE: 2022-10-26T10:14:58ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – wannacry – c0ca2ff66deb363ad5186ca42387a1ec

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: c0ca2ff66deb363ad5186ca42387a1ecSHA1: e2ea45088d801a4654c6e80ba3813a666eba3074ANALYSIS DATE: 2022-10-26T10:00:31ZTTPS: T1046, T1158, T1222 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – wannacry – 0e4c64bd0db07a8da4a577ce09ad2ce5

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 0e4c64bd0db07a8da4a577ce09ad2ce5SHA1: 8ace3f83841d5e7d4ffb28692378dea58edb3dc1ANALYSIS DATE: 2022-10-26T10:00:26ZTTPS: T1158, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 27e067421cc490a5e99e2115f0bb4277

October 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 27e067421cc490a5e99e2115f0bb4277SHA1: 162b5729e0255d3cd5f22ac454e7a57b23ff0abcANALYSIS DATE: 2022-10-26T10:40:32ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 60d2fd5a1b013f6e6ea6a937a85aea86

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 60d2fd5a1b013f6e6ea6a937a85aea86SHA1: 75c509bf1842bb13def4137e61ec2b2e177e95deANALYSIS DATE: 2022-10-26T10:20:21ZTTPS: T1158, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 6b0c04b30f34d975a34cd1b789d29db7

October 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 6b0c04b30f34d975a34cd1b789d29db7SHA1: 3198404e4f97321720829dae641e06d360d705d1ANALYSIS DATE: 2022-10-26T10:40:27ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4aa20e139e4599ff9a50edf65716677f

October 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4aa20e139e4599ff9a50edf65716677fSHA1: 1d01c5b9b852ac3291c7c6a1e35e168d80ed239cANALYSIS DATE: 2022-10-26T10:40:20ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

threatintel

Malware Analysis – ransomware – e08ce5d0e0766ddb80540bf783a9488e

Malware Analysis – ransomware – 73fc61bbec7230ef268be95246dbfa67

Malware Analysis – djvu – 897904a30b9f93342c41c7baccc0395e

Malware Analysis – ransomware – e639e001fb263d44d896b16771277ce9

Malware Analysis – wannacry – eea2153661910584cf63390ca3adb28b

Malware Analysis – djvu – 11a56eaa628aa4a2576a0e7fb15a52c7

Malware Analysis – wannacry – 5535a78a4b4a483f5eeef222c4a142f0

Malware Analysis – wannacry – eea571229a25bc2f5b59dce07c361cb2

Cobalt Stike Beacon Detected – 124[.]221[.]248[.]119:6666

Malware Analysis – djvu – 042fd0315eccd1810935b117f8c1f80d

Malware Analysis – discovery – 223a5331677dccb0d104c4ff1932a222

Malware Analysis – wannacry – c0ca2ff66deb363ad5186ca42387a1ec

Malware Analysis – wannacry – 0e4c64bd0db07a8da4a577ce09ad2ce5

Malware Analysis – ransomware – 27e067421cc490a5e99e2115f0bb4277

Malware Analysis – wannacry – 60d2fd5a1b013f6e6ea6a937a85aea86

Malware Analysis – ransomware – 6b0c04b30f34d975a34cd1b789d29db7

Malware Analysis – ransomware – 4aa20e139e4599ff9a50edf65716677f

Two flaws in Cisco AnyConnect Secure Mobility client for Windows actively exploited

VMware fixes critical RCE in VMware Cloud Foundation

Black Basta Ransomware Victim: Essick Air Products

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]28:80

Cobalt Stike Beacon Detected – 46[.]30[.]189[.]45:80

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]27:443

Cobalt Stike Beacon Detected – 164[.]132[.]6[.]83:443

CVE Alert: CVE-2025-54253 – Adobe – Adobe Experience Manager

HackerOne Bug Bounty Disclosure: oneagent-unprivileged-ntlm-user-coercion-remiec

HackerOne Bug Bounty Disclosure: samesite-restrictions-are-lifted-and-samesite-strict-cookie-are-being-sent-mingijung

[QILIN] – Ransomware Victim: TF LE TOIT FOREZIEN

[QILIN] – Ransomware Victim: Turnkey Africa

You may have missed