Malware Analysis

Malware Analysis – persistence – be009e5259b220643b1299ee87924c48

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: be009e5259b220643b1299ee87924c48SHA1: 969fc0b582688127aa8cace9307dafb71f997640ANALYSIS DATE: 2022-11-28T06:16:37ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 35dbf14ccd580c19ade8b4378b7ef228

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 35dbf14ccd580c19ade8b4378b7ef228SHA1: 02922d258a6379fb369c99b4a7bba9ebc8786ac4ANALYSIS DATE: 2022-11-28T06:20:06ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 4ce038d79655af6937ffe506cdf53a5f

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4ce038d79655af6937ffe506cdf53a5fSHA1: b299f3e6794de5c7b1bcb98090ce4c5e2ddbc352ANALYSIS DATE: 2022-11-28T06:21:05ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – deec2a79f1cfbdc8dced0f68ec908a28

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: deec2a79f1cfbdc8dced0f68ec908a28SHA1: 0baff8fffe6f148f468bb016c28f87966ff761f5ANALYSIS DATE: 2022-11-28T06:21:47ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 7616872b3a200264a8d476db29be2313

November 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 7616872b3a200264a8d476db29be2313SHA1: 2d91b496b2b722ca990483fa9dd786c50bb20a91ANALYSIS DATE: 2022-11-28T06:29:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 2104c98cf906bb7d3a88b7e471e8e316

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 2104c98cf906bb7d3a88b7e471e8e316SHA1: 8964bf3b65661396d4bc31fbd508cf76bfc1dc80ANALYSIS DATE: 2022-11-28T06:25:58ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 6374833fa3cfdee0c008a01cfeac98c0

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6374833fa3cfdee0c008a01cfeac98c0SHA1: a12cd05029145de309cdc28093ec76cfe22d9f90ANALYSIS DATE: 2022-11-28T06:24:37ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 72f2f9e5b2923d6e7bdc80dc573e59cd

November 29, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 72f2f9e5b2923d6e7bdc80dc573e59cdSHA1: 784c224574ebb49815c03e05ef00ccacf7b49ba4ANALYSIS DATE: 2022-11-29T08:58:25ZTTPS: T1082, T1012, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 2c6e6e290972fcd5e556efccfd51f174

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:lege, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware,...

Malware Analysis – discovery – 600e5eaa2e5c37f15d63d190daac4439

November 29, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, ransomware, trojanMD5: 600e5eaa2e5c37f15d63d190daac4439SHA1: ec376db711cfacb70d03de0cfef5238c6ffb3068ANALYSIS DATE: 2022-11-29T08:59:39ZTTPS: T1107, T1490, T1088, T1089, T1112, T1031, T1053,...

Malware Analysis – – ed932fb2639b8675dca13e78939676a6

November 29, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: ed932fb2639b8675dca13e78939676a6SHA1: 541a1ce815384932b807eb9256e2b95184465e7fANALYSIS DATE: 2022-11-29T09:21:05ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 600f9e2655063f0d028a052e876c1027

November 29, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 600f9e2655063f0d028a052e876c1027SHA1: eb5014b5be86c70358642e3ed9cb3501996ea758ANALYSIS DATE: 2022-11-29T10:50:42ZTTPS: T1005, T1081, T1082, T1053,...

Malware Analysis – magniber – c6c0bf2a9734d4825aaf29119f76f192

November 29, 2022

Score: 10 MALWARE FAMILY: magniberTAGS:family:magniber, ransomwareMD5: c6c0bf2a9734d4825aaf29119f76f192SHA1: 11be57cc037eea85dcca2175cdda599faf30dc3bANALYSIS DATE: 2022-11-29T10:47:14ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – octo – 5bc6f74bce69f6b942426e21c69e08f0

November 29, 2022

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, infostealer, ransomware, rat, trojanMD5: 5bc6f74bce69f6b942426e21c69e08f0SHA1: b59d70df1e5d1f2d43708a00e6a97011154956fcANALYSIS DATE: 2022-11-29T09:37:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 5f0281a720551592837f72c25b839254

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 5f0281a720551592837f72c25b839254SHA1: f6dc4d792cbb8552debe304c79e00b49c594fc7bANALYSIS DATE:...

Malware Analysis – ransomware – fb13a3efdbb801aef77603f6aaea272e

November 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: fb13a3efdbb801aef77603f6aaea272eSHA1: 62f526f82da55e5e3bc835d0e3b770b236d5e99dANALYSIS DATE: 2022-11-29T11:01:08ZTTPS: T1012, T1120, T1082, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 0baa60f8c2818424c9a9c1f3cfc42aad

November 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0baa60f8c2818424c9a9c1f3cfc42aadSHA1: 575052a2196cd8f6d3c5b1955fbf5a93dc9b53f9ANALYSIS DATE: 2022-11-29T11:01:10ZTTPS: T1107, T1490, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 13f7d86f390ac912fd0c77ac7ab97c7b

November 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 13f7d86f390ac912fd0c77ac7ab97c7bSHA1: bb19dd7ff1d34e9ae08589b0f6350319d8a15749ANALYSIS DATE: 2022-11-29T11:01:09ZTTPS: T1082, T1107, T1490, T1112, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – f6bc1b461df6cdd28183fdde78c630d2

November 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f6bc1b461df6cdd28183fdde78c630d2SHA1: a22826c3d4ad28ef0b6e1971ffb59e65b1412d54ANALYSIS DATE: 2022-11-29T11:01:12ZTTPS: T1012, T1120, T1082, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 333e965aedff914fb6cb49938097bfd7

November 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 333e965aedff914fb6cb49938097bfd7SHA1: 27633cf2b66d46639ddd4e45e915d7201d5964aeANALYSIS DATE: 2022-11-29T11:01:17ZTTPS: T1012, T1120, T1082, T1107, T1490, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 4ee1b43ffdea06ff320b1dbfc7195087

November 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 4ee1b43ffdea06ff320b1dbfc7195087SHA1: 3efec2894e16fa21417808c99bedfa7ddbd5c881ANALYSIS DATE: 2022-11-29T11:01:15ZTTPS: T1112, T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 0b69c52d88d2c047bf176d59b2f9ce4c

November 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0b69c52d88d2c047bf176d59b2f9ce4cSHA1: 43a770e0f2fe02b606f37c29d8dd81d57ce233b8ANALYSIS DATE: 2022-11-29T11:01:13ZTTPS: T1012, T1120, T1082, T1107, T1490, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – f1a3a57b1e469f0ecb2674bc8e2ed1f5

November 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f1a3a57b1e469f0ecb2674bc8e2ed1f5SHA1: 8b51223c1d124a9db8102a510bf469a77682fc3bANALYSIS DATE: 2022-11-29T11:01:14ZTTPS: T1012, T1120, T1082, T1107, T1490, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – play – 6ea4b9b0ad0692892f6e4f1b4f05aa72

November 29, 2022

Score: 10 MALWARE FAMILY: playTAGS:family:play, ransomware, spyware, stealerMD5: 6ea4b9b0ad0692892f6e4f1b4f05aa72SHA1: 3bb50ceeaa8a698687863dd44e149214d4372601ANALYSIS DATE: 2022-11-29T11:21:36ZTTPS: T1012, T1120, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis

Malware Analysis – persistence – be009e5259b220643b1299ee87924c48

Malware Analysis – persistence – 35dbf14ccd580c19ade8b4378b7ef228

Malware Analysis – evasion – 4ce038d79655af6937ffe506cdf53a5f

Malware Analysis – persistence – deec2a79f1cfbdc8dced0f68ec908a28

Malware Analysis – – 7616872b3a200264a8d476db29be2313

Malware Analysis – persistence – 2104c98cf906bb7d3a88b7e471e8e316

Malware Analysis – persistence – 6374833fa3cfdee0c008a01cfeac98c0

Malware Analysis – discovery – 72f2f9e5b2923d6e7bdc80dc573e59cd

Malware Analysis – amadey – 2c6e6e290972fcd5e556efccfd51f174

Malware Analysis – discovery – 600e5eaa2e5c37f15d63d190daac4439

Malware Analysis – – ed932fb2639b8675dca13e78939676a6

Malware Analysis – djvu – 600f9e2655063f0d028a052e876c1027

Malware Analysis – magniber – c6c0bf2a9734d4825aaf29119f76f192

Malware Analysis – octo – 5bc6f74bce69f6b942426e21c69e08f0

Malware Analysis – amadey – 5f0281a720551592837f72c25b839254

Malware Analysis – ransomware – fb13a3efdbb801aef77603f6aaea272e

Malware Analysis – ransomware – 0baa60f8c2818424c9a9c1f3cfc42aad

Malware Analysis – ransomware – 13f7d86f390ac912fd0c77ac7ab97c7b

Malware Analysis – ransomware – f6bc1b461df6cdd28183fdde78c630d2

Malware Analysis – ransomware – 333e965aedff914fb6cb49938097bfd7

Malware Analysis – ransomware – 4ee1b43ffdea06ff320b1dbfc7195087

Malware Analysis – ransomware – 0b69c52d88d2c047bf176d59b2f9ce4c

Malware Analysis – ransomware – f1a3a57b1e469f0ecb2674bc8e2ed1f5

Malware Analysis – play – 6ea4b9b0ad0692892f6e4f1b4f05aa72

Google Chrome Multiple Vulnerabilities

Cobalt Strike Beacon Detected – 124[.]221[.]116[.]169:80

Cobalt Strike Beacon Detected – 196[.]251[.]87[.]191:4433

Cobalt Strike Beacon Detected – 179[.]43[.]186[.]243:80

Cobalt Strike Beacon Detected – 118[.]25[.]91[.]151:80

You may have missed