Malware Analysis

Malware Analysis – evasion – 1a2180b48353c1061d8d95731e285875

November 25, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1a2180b48353c1061d8d95731e285875SHA1: 05eae57548163ac58ea12412917022c8b59422fdANALYSIS DATE: 2022-11-25T09:01:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – d8042bbb920220cca0279aec12c6b361

November 25, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: d8042bbb920220cca0279aec12c6b361SHA1: d1548814555b74bb6b875fc79478ca9db4bfa6a3ANALYSIS DATE: 2022-11-25T09:10:58ZTTPS: T1031, T1060, T1112, T1082, T1088, T1089, T1107, T1490,...

Malware Analysis – ransomware – 3690bb406e09de249faf54abf8e7c785

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 3690bb406e09de249faf54abf8e7c785SHA1: d4bcc442cef53b35394e665f823bcb371679ba54ANALYSIS DATE: 2022-11-25T09:06:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – a9a693e712778a2b4585e36a1921d246

November 25, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: a9a693e712778a2b4585e36a1921d246SHA1: 9d97e16d154fc0c8dddd0576526311ecbff7461cANALYSIS DATE: 2022-11-25T09:16:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – f414edfd28b02d6a80f7549476e441da

November 25, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f414edfd28b02d6a80f7549476e441daSHA1: af028d184599515b31c92fcc7ea87f19b6cee735ANALYSIS DATE: 2022-11-25T09:07:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – qulab – a3476e4532c77e8ee20ecabd1035d3fd

November 25, 2022

Score: 10 MALWARE FAMILY: qulabTAGS:family:qulab, discovery, evasion, ransomware, spyware, stealer, upxMD5: a3476e4532c77e8ee20ecabd1035d3fdSHA1: 15d58869b7ed04c16b3143ab1ee0e085056363bdANALYSIS DATE: 2022-11-25T09:20:31ZTTPS: T1158, T1082, T1005, T1081, T1012...

Malware Analysis – ransomware – f711366dc0ee0e2b3468867f58abbe15

November 25, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f711366dc0ee0e2b3468867f58abbe15SHA1: 8ba469fe3e4614a3674209cecc54e5e9f4087bbeANALYSIS DATE: 2022-11-25T09:16:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 1dc8b7140dee61b956b5afecd38df9c3

November 25, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1dc8b7140dee61b956b5afecd38df9c3SHA1: e1c63236ec35ec81c0845618217a55bdd2349056ANALYSIS DATE: 2022-11-25T09:19:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – agent_smith – 8205837d1fe12e2488ebce5152f6f567

November 25, 2022

Score: 10 MALWARE FAMILY: agent_smithTAGS:family:agent_smith, adware, ransomwareMD5: 8205837d1fe12e2488ebce5152f6f567SHA1: 1246804eea6f68eb963751ae0118cc3b8f697611ANALYSIS DATE: 2022-11-25T09:20:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – agent_smith – 058f5a4037f42ee67766531988924c73

November 25, 2022

Score: 10 MALWARE FAMILY: agent_smithTAGS:family:agent_smith, adware, evasion, ransomwareMD5: 058f5a4037f42ee67766531988924c73SHA1: 9cd3a910fd8ef392748e964c98dad7dff59fa066ANALYSIS DATE: 2022-11-25T09:33:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – c052e847fbbcc286ba6cfe299d272876

November 25, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomware, spyware, stealerMD5: c052e847fbbcc286ba6cfe299d272876SHA1: 5a67a3e94d41f5d76a714814dd780493ff98283aANALYSIS DATE: 2022-11-25T09:31:59ZTTPS: T1112, T1005, T1081, T1012, T1082, T1130, T1059, T1107,...

Malware Analysis – evasion – 2cec47e2b7aea7befe8c882becdbbee5

November 25, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2cec47e2b7aea7befe8c882becdbbee5SHA1: a977002faaff96f3d39920e30a0cd5d030d8fa26ANALYSIS DATE: 2022-11-25T09:23:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 2df4253f3810fe295b4f37897f249792

November 25, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2df4253f3810fe295b4f37897f249792SHA1: 15eeedbea75b2b5eeea07c71d827ca9d72f078fdANALYSIS DATE: 2022-11-25T09:22:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 7acc9328af4bc6e969fc8d4a4ae7fd02

November 25, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7acc9328af4bc6e969fc8d4a4ae7fd02SHA1: 7aac9d7f950afb0acbada6b480040a8acc39340aANALYSIS DATE: 2022-11-25T09:38:14ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ryuk – b160ba8945e6d1d8612da6f1a7409621

November 25, 2022

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, dave, discovery, ransomwareMD5: b160ba8945e6d1d8612da6f1a7409621SHA1: 5e59d635511f9f3e9abadf2d8040f7383af41716ANALYSIS DATE: 2022-11-25T09:33:31ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – c8cd5664518678ad81a7b54850826e27

November 25, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c8cd5664518678ad81a7b54850826e27SHA1: 9457da87080218fca37b6719a9501339f6bc3b7fANALYSIS DATE: 2022-11-25T09:37:32ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – 624992b6018c5df59dd636a066654947

November 25, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: 624992b6018c5df59dd636a066654947SHA1: 75b7bd787a197b3f75ba16041b4734c9ebead371ANALYSIS DATE: 2022-11-25T09:36:14ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 231aedbe99bd20b9ef8c348f89d2171d

November 25, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 231aedbe99bd20b9ef8c348f89d2171dSHA1: a42f4b26a39616ab8db4166d3c6bd1bc0c352a8bANALYSIS DATE: 2022-11-25T09:58:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – agent_smith – 7b5621db21e666d6eaa4285d6c14f5b4

November 25, 2022

Score: 10 MALWARE FAMILY: agent_smithTAGS:family:agent_smith, adware, ransomwareMD5: 7b5621db21e666d6eaa4285d6c14f5b4SHA1: 84f918c1a3e8c64aaa6591d69eb2e27d1b945ce8ANALYSIS DATE: 2022-11-25T09:59:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – dharma – c52198dd4ec25b0eea665e6e0a8d4dd7

November 25, 2022

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: c52198dd4ec25b0eea665e6e0a8d4dd7SHA1: 2ead1a996c1a63be93e91587103320bca38561aeANALYSIS DATE: 2022-11-25T09:54:43ZTTPS: T1107, T1490, T1005, T1081, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – evasion – b45fa7f5250c25d999da645a498ac026

November 25, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: b45fa7f5250c25d999da645a498ac026SHA1: 85efc4e36a8c20e3216be0277e44407015578478ANALYSIS DATE: 2022-11-25T10:00:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – discovery – ebfcf8c015fe20503aca81f42d42c692

November 25, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploitMD5: ebfcf8c015fe20503aca81f42d42c692SHA1: 98949a83bd2277221fa643933173f338f1ce44f8ANALYSIS DATE: 2022-11-25T10:04:58ZTTPS: T1222, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – a4bb650a27719f16b8f659f330891663

November 25, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: a4bb650a27719f16b8f659f330891663SHA1: cc467e611100b7e6694136e1303aee0f402793b3ANALYSIS DATE: 2022-11-25T10:12:06ZTTPS: T1107, T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – e73502f7ceff47b7af92d573f9577ef6

November 25, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: e73502f7ceff47b7af92d573f9577ef6SHA1: 555f7106d34447e38971168ef9faa85ed17cf268ANALYSIS DATE: 2022-11-25T10:04:30ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis

Malware Analysis – evasion – 1a2180b48353c1061d8d95731e285875

Malware Analysis – evasion – d8042bbb920220cca0279aec12c6b361

Malware Analysis – ransomware – 3690bb406e09de249faf54abf8e7c785

Malware Analysis – banker – a9a693e712778a2b4585e36a1921d246

Malware Analysis – ransomware – f414edfd28b02d6a80f7549476e441da

Malware Analysis – qulab – a3476e4532c77e8ee20ecabd1035d3fd

Malware Analysis – ransomware – f711366dc0ee0e2b3468867f58abbe15

Malware Analysis – evasion – 1dc8b7140dee61b956b5afecd38df9c3

Malware Analysis – agent_smith – 8205837d1fe12e2488ebce5152f6f567

Malware Analysis – agent_smith – 058f5a4037f42ee67766531988924c73

Malware Analysis – evasion – c052e847fbbcc286ba6cfe299d272876

Malware Analysis – evasion – 2cec47e2b7aea7befe8c882becdbbee5

Malware Analysis – ransomware – 2df4253f3810fe295b4f37897f249792

Malware Analysis – ransomware – 7acc9328af4bc6e969fc8d4a4ae7fd02

Malware Analysis – ryuk – b160ba8945e6d1d8612da6f1a7409621

Malware Analysis – ransomware – c8cd5664518678ad81a7b54850826e27

Malware Analysis – banker – 624992b6018c5df59dd636a066654947

Malware Analysis – ransomware – 231aedbe99bd20b9ef8c348f89d2171d

Malware Analysis – agent_smith – 7b5621db21e666d6eaa4285d6c14f5b4

Malware Analysis – dharma – c52198dd4ec25b0eea665e6e0a8d4dd7

Malware Analysis – evasion – b45fa7f5250c25d999da645a498ac026

Malware Analysis – discovery – ebfcf8c015fe20503aca81f42d42c692

Malware Analysis – evasion – a4bb650a27719f16b8f659f330891663

Malware Analysis – evasion – e73502f7ceff47b7af92d573f9577ef6

[SINOBI] – Ransomware Victim: Seward County, KS

[SINOBI] – Ransomware Victim: CapitalPlus Exchange

Cobalt Strike Beacon Detected – 43[.]163[.]112[.]217:443

Cobalt Strike Beacon Detected – 45[.]204[.]216[.]24:443

Cobalt Strike Beacon Detected – 8[.]155[.]0[.]238:443

You may have missed