OSINT

Malware Analysis – djvu – 3135f5ea657071a0408c14ae45b950ae

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 3135f5ea657071a0408c14ae45b950aeSHA1: aecdf7ed7cd490fce083ee0b967f2dd60aa7b891ANALYSIS DATE: 2023-01-13T16:03:31ZTTPS:...

Malware Analysis – djvu – 2cc9c4905636d184f5256a2ac37e483b

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 2cc9c4905636d184f5256a2ac37e483bSHA1: 3990069a21db98cbd1c33a66cb68a184c51da357ANALYSIS DATE: 2023-01-13T15:54:19ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – evasion – 73c608165fc99f8ef3ff46f00fbbc6e1

January 13, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 73c608165fc99f8ef3ff46f00fbbc6e1SHA1: 3e234aa1df5858fc283aaa82df18aecf07a9b80cANALYSIS DATE: 2023-01-13T15:49:24ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 002906aed1cf4cfa92bdbf8d8043f09f

January 13, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 002906aed1cf4cfa92bdbf8d8043f09fSHA1: 3b62a54a2de9ed62ddecaf9373bed4f0617b24bcANALYSIS DATE: 2023-01-13T16:24:58ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 2026e5b2a00a548997459cbe11655784

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 2026e5b2a00a548997459cbe11655784SHA1: 88a368ea94f1c10ab6dc4306fe4c911245736e73ANALYSIS DATE: 2023-01-13T16:50:25ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 789f2ca0649dbf650af10391d3618a99

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 789f2ca0649dbf650af10391d3618a99SHA1: ceab7bb533ad3a803319d69cba21f6a4a489a22fANALYSIS DATE: 2023-01-13T16:30:50ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – f400444ce55b318596cd2772d3578b7e

January 13, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f400444ce55b318596cd2772d3578b7eSHA1: b6d2bfb420f7f3fcf588db1992c0d74cf7ce9e94ANALYSIS DATE: 2023-01-13T16:59:59ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – smokeloader – 47d6ed6eb2b930ec19fba5a5f4bdb632

January 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 47d6ed6eb2b930ec19fba5a5f4bdb632SHA1: 9c71877c95162d128fa0f41603f433b5fa2a3b9aANALYSIS DATE: 2023-01-13T17:41:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 059274e07bbf83ec5b5d4f1d957681eb

January 13, 2023

Score: 8 MALWARE FAMILY: TAGS:MD5: 059274e07bbf83ec5b5d4f1d957681ebSHA1: b0dd598c4dd719ccfc80d769becf5d0589a74eaaANALYSIS DATE: 2023-01-13T17:35:23ZTTPS: T1082, T1130, T1112, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – 95e61047b39dfa7765f3b1cecd32334a

January 13, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, spyware, stealer, wormMD5: 95e61047b39dfa7765f3b1cecd32334aSHA1: 1b7b93e3cecf30d733971788c26b74f514a6bec3ANALYSIS DATE: 2023-01-13T17:04:09ZTTPS: T1082, T1158, T1005, T1081, T1012, T1120,...

Malware Analysis – smokeloader – 824f6917bdbc50b5dd169a5b51f0f550

January 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 824f6917bdbc50b5dd169a5b51f0f550SHA1: cb9b985b9b0d1bff57b06b4819fcf3c090747701ANALYSIS DATE: 2023-01-13T17:00:09ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 45[.]124[.]112[.]142:86

January 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bkcrack – Crack Legacy Zip Encryption With Biham And Kocher’s Known Plaintext Attack

January 13, 2023

Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose...

Malware Analysis – evasion – 19944159dfa94a1b75effd85e6b906dc

January 13, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 19944159dfa94a1b75effd85e6b906dcSHA1: 250acf87366f4c0cf91679a0e93dfc79954f0f10ANALYSIS DATE: 2023-01-13T09:23:05ZTTPS: T1490, T1107, T1012, T1120, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 05c674c2eaea162ee88982395a684968

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 05c674c2eaea162ee88982395a684968SHA1: 135dac8a95134eeca5d84201448f4f633ea7f865ANALYSIS DATE: 2023-01-13T10:06:04ZTTPS: T1130, T1112, T1060, T1222, T1082...

Cobalt Stike Beacon Detected – 52[.]43[.]159[.]70:443

January 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]168[.]135[.]151:2083

January 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]34[.]76[.]186:443

January 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 54[.]88[.]53[.]17:80

January 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 17b59c81fe6a8a821facdb5a071eeded

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 17b59c81fe6a8a821facdb5a071eededSHA1: 5958d905895542615f5e024ad18ea1321fcb4e78ANALYSIS DATE: 2023-01-13T10:35:33ZTTPS: T1053, T1012, T1005, T1081,...

Malware Analysis – lockbit – 3e5b053a4107e00029a9ea5f5e282a00

January 13, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 3e5b053a4107e00029a9ea5f5e282a00SHA1: 4edad45f0b395f5898cefa82adb3606e371f6d60ANALYSIS DATE: 2023-01-13T10:39:47ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – c23fe1948b4258f39114c730c04a2b9f

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: c23fe1948b4258f39114c730c04a2b9fSHA1: cffb7436ff0867e5c492d301044b0e55620b428bANALYSIS DATE: 2023-01-13T10:36:52ZTTPS: T1053,...

Malware Analysis – evasion – 0d11e3db3bfdf788d51666e3374cba05

January 13, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 0d11e3db3bfdf788d51666e3374cba05SHA1: a20e2ca578289c6b32d74698f356242e7564dca1ANALYSIS DATE: 2023-01-13T10:23:22ZTTPS: T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – dharma – b178705190001fcb012000eed9ba33d2

January 13, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: b178705190001fcb012000eed9ba33d2SHA1: db6d85f58ad3e6ebb62d92be1dbe7741023a1e7bANALYSIS DATE: 2023-01-13T11:07:24ZTTPS: T1005, T1081, T1060, T1112, T1107, T1490, T1082...

OSINT

Malware Analysis – djvu – 3135f5ea657071a0408c14ae45b950ae

Malware Analysis – djvu – 2cc9c4905636d184f5256a2ac37e483b

Malware Analysis – evasion – 73c608165fc99f8ef3ff46f00fbbc6e1

Malware Analysis – ransomware – 002906aed1cf4cfa92bdbf8d8043f09f

Malware Analysis – djvu – 2026e5b2a00a548997459cbe11655784

Malware Analysis – djvu – 789f2ca0649dbf650af10391d3618a99

Malware Analysis – ransomware – f400444ce55b318596cd2772d3578b7e

Malware Analysis – smokeloader – 47d6ed6eb2b930ec19fba5a5f4bdb632

Malware Analysis – – 059274e07bbf83ec5b5d4f1d957681eb

Malware Analysis – wannacry – 95e61047b39dfa7765f3b1cecd32334a

Malware Analysis – smokeloader – 824f6917bdbc50b5dd169a5b51f0f550

Cobalt Stike Beacon Detected – 45[.]124[.]112[.]142:86

Bkcrack – Crack Legacy Zip Encryption With Biham And Kocher’s Known Plaintext Attack

Malware Analysis – evasion – 19944159dfa94a1b75effd85e6b906dc

Malware Analysis – djvu – 05c674c2eaea162ee88982395a684968

Cobalt Stike Beacon Detected – 52[.]43[.]159[.]70:443

Cobalt Stike Beacon Detected – 104[.]168[.]135[.]151:2083

Cobalt Stike Beacon Detected – 101[.]34[.]76[.]186:443

Cobalt Stike Beacon Detected – 54[.]88[.]53[.]17:80

Malware Analysis – djvu – 17b59c81fe6a8a821facdb5a071eeded

Malware Analysis – lockbit – 3e5b053a4107e00029a9ea5f5e282a00

Malware Analysis – djvu – c23fe1948b4258f39114c730c04a2b9f

Malware Analysis – evasion – 0d11e3db3bfdf788d51666e3374cba05

Malware Analysis – dharma – b178705190001fcb012000eed9ba33d2

[QILIN] – Ransomware Victim: www[.]nuphoton[.]com

[QILIN] – Ransomware Victim: semco-tech[.]com

[KAWA4096] – Ransomware Victim: ****-*[.]co[.]jp

[QILIN] – Ransomware Victim: simmons-Boardman Publishing, Inc

[FLOCKER] – Ransomware Victim: I*******n[.]com

You may have missed