OSINT

Malware Analysis – phobos – 25e0c92a4e1d058d5a04089efe63b290

December 30, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 25e0c92a4e1d058d5a04089efe63b290SHA1: 0f34c29d2ce181dbe88bcb5d28ea8aa3c5bbd5e3ANALYSIS DATE: 2022-12-30T05:23:03ZTTPS: T1490, T1059, T1107, T1031, T1060, T1112,...

Malware Analysis – phobos – a6b6c9f529bbac5973236d91a65a80a6

December 30, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: a6b6c9f529bbac5973236d91a65a80a6SHA1: d0eb443e04ecf1ac64eddd8a4b0eacaa5d3222feANALYSIS DATE: 2022-12-30T05:22:03ZTTPS: T1490, T1059, T1107, T1060, T1112, T1031,...

Malware Analysis – discovery – 9c959f91b124b46d82ee52eeef1505ba

December 30, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 9c959f91b124b46d82ee52eeef1505baSHA1: ebcbcac2045d571019a9d797b610b3ac148424a1ANALYSIS DATE: 2022-12-30T05:14:42ZTTPS: T1012, T1102, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – phobos – 715bb8ece6c740ab68a9aa2f4eb0aa04

December 30, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 715bb8ece6c740ab68a9aa2f4eb0aa04SHA1: 6fef9bbee0ef34c8e0bbc2510eb14c7751329577ANALYSIS DATE: 2022-12-30T05:13:03ZTTPS: T1490, T1059, T1107, T1060, T1112, T1005,...

Malware Analysis – amadey – 4619b57f0aa69fbf3cce99b690019581

December 30, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:gozi, family:lgoogloader, family:smokeloader, family:vidar, botnet:19, botnet:22500, backdoor, banker, collection, discovery, downloader, infostealer, isfb,...

Malware Analysis – phobos – c5d5171d5af7b55de4056c8ef928b6d2

December 30, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: c5d5171d5af7b55de4056c8ef928b6d2SHA1: 62f92ae34f886ae7c77f5c3eaf52fecdb00d6b77ANALYSIS DATE: 2022-12-30T05:23:03ZTTPS: T1490, T1059, T1107, T1005, T1081, T1060,...

Malware Analysis – djvu – eb1aabb044efe23bdd1b84a58d66feb4

December 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: eb1aabb044efe23bdd1b84a58d66feb4SHA1: 604a9ea5a26aa61fe4a3650b91a8fe8d36247ddcANALYSIS DATE: 2022-12-30T05:52:09ZTTPS: T1082, T1012, T1222, T1005,...

Malware Analysis – djvu – f891b2289720468df1c4e8bd715445bb

December 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: f891b2289720468df1c4e8bd715445bbSHA1: e8243516f0e21048dd96d3a88c18248c611e3369ANALYSIS DATE: 2022-12-30T05:30:06ZTTPS: T1060, T1112, T1222, T1082, T1053,...

OSINT

Malware Analysis – phobos – 25e0c92a4e1d058d5a04089efe63b290

Malware Analysis – phobos – a6b6c9f529bbac5973236d91a65a80a6

Malware Analysis – discovery – 9c959f91b124b46d82ee52eeef1505ba

Malware Analysis – phobos – 715bb8ece6c740ab68a9aa2f4eb0aa04

Malware Analysis – amadey – 4619b57f0aa69fbf3cce99b690019581

Malware Analysis – phobos – c5d5171d5af7b55de4056c8ef928b6d2

Malware Analysis – djvu – eb1aabb044efe23bdd1b84a58d66feb4

Malware Analysis – djvu – f891b2289720468df1c4e8bd715445bb

Cobalt Stike Beacon Detected – 3[.]145[.]195[.]94:80

Cobalt Stike Beacon Detected – 163[.]123[.]142[.]146:443

Cobalt Stike Beacon Detected – 119[.]3[.]173[.]115:18081

Royal Ransomware Victim: Iowa Public Television

Royal Ransomware Victim: Waterloo Wellington Flight Centre

Cobalt Stike Beacon Detected – 81[.]70[.]88[.]97:80

Cobalt Stike Beacon Detected – 120[.]48[.]43[.]5:6666

Cobalt Stike Beacon Detected – 185[.]106[.]94[.]9:8080

Cobalt Stike Beacon Detected – 101[.]43[.]109[.]197:8080

S3Crets_Scanner – Hunting For Secrets Uploaded To Public S3 Buckets

Aftermath – A Free macOS IR Framework

Top 20 Most Popular Hacking Tools in 2022

OFRAK – Unpack, Modify, And Repack Binaries

Autobloody – Tool To Automatically Exploit Active Directory Privilege Escalation Paths Shown By BloodHound

Havoc – Modern and malleable post-exploitation command and control framework

Top 20 Most Popular Hacking Tools in 2022

Cobalt Strike Beacon Detected – 39[.]107[.]85[.]83:50050

Cobalt Strike Beacon Detected – 47[.]237[.]136[.]112:8080

Cobalt Strike Beacon Detected – 115[.]29[.]202[.]62:8222

Cobalt Strike Beacon Detected – 1[.]94[.]236[.]193:9998

Cobalt Strike Beacon Detected – 121[.]40[.]112[.]176:8087

You may have missed