OSINT

Malware Analysis – ransomware – 82227eb7a8a71d665a79fbe0739eaeb8

February 11, 2023

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 82227eb7a8a71d665a79fbe0739eaeb8SHA1: ef1c13a0d7efb82755b2b98e26f3b4f531c2c72bANALYSIS DATE: 2023-02-11T15:12:57ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – 6d25750129552f448405439eb4e90ca7

February 11, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 6d25750129552f448405439eb4e90ca7SHA1: c6db058733733acb2f547569295f67fa808d5ad3ANALYSIS DATE: 2023-02-11T16:19:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – ea552c3e9806298e1d2c2246a5f01973

February 11, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ea552c3e9806298e1d2c2246a5f01973SHA1: 9ca08a6d0053e9515104e2e5ba374936eb689e0dANALYSIS DATE: 2023-02-11T15:53:15ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – cd5df181c1ea27e3f45fdbf2a4d3f6ff

February 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cd5df181c1ea27e3f45fdbf2a4d3f6ffSHA1: 533af8e223aac78aed2c58d872f3be995d103253ANALYSIS DATE: 2023-02-11T17:12:59ZTTPS: T1012, T1005, T1081, T1082,...

Malware Analysis – djvu – 796d4630165fe9d82db1830cd6a85fd2

February 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, trojan, vmprotectMD5: 796d4630165fe9d82db1830cd6a85fd2SHA1: 54baa86ab231578a35a3d9b6861fff7ecb07db10ANALYSIS DATE: 2023-02-11T17:47:13ZTTPS: T1012, T1082, T1120, T1222,...

Malware Analysis – djvu – 55fec0029f09cc415f47b670d65b8d85

February 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 55fec0029f09cc415f47b670d65b8d85SHA1: 710b2e02289af828a0d3068b3d76357f0b8a2d19ANALYSIS DATE: 2023-02-11T17:31:23ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – 908a00fa64599d1f3e40e5926bb77548

February 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 908a00fa64599d1f3e40e5926bb77548SHA1: 0a9295ab7a2db702c7188e2b7e2574d8db9927b8ANALYSIS DATE: 2023-02-11T17:03:27ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 6b5b2f946394208759afe4848dc720ad

February 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 6b5b2f946394208759afe4848dc720adSHA1: d2941d251511006660d4d64560dab58b1124943aANALYSIS DATE: 2023-02-11T09:26:07ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – djvu – 83c3a77944c98ff33c27422973f498d4

February 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: 83c3a77944c98ff33c27422973f498d4SHA1: 2f741357ed679ed4d972b2a02265db927a33809eANALYSIS...

Cobalt Stike Beacon Detected – 47[.]95[.]248[.]144:80

February 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – fba1dbb9208031a21bdb80cb60b23ad2

February 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: fba1dbb9208031a21bdb80cb60b23ad2SHA1: e0d77781ba9c17caf50759acdcf5d2f8b33a4b7fANALYSIS DATE: 2023-02-11T09:59:09ZTTPS: T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 93e58fa4667b20bddafb9a3d50a3f81f

February 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, evasion, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 93e58fa4667b20bddafb9a3d50a3f81fSHA1:...

Malware Analysis – ransomware – e7beb2fcccf55f27ed67eb9870362913

February 11, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e7beb2fcccf55f27ed67eb9870362913SHA1: c205d6bb2c0f8514ebe625b37fba00df2f09cc94ANALYSIS DATE: 2023-02-11T10:14:33ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – – 5af48fb2e7485ccee2b7c5bdf2ae9d4c

February 11, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 5af48fb2e7485ccee2b7c5bdf2ae9d4cSHA1: 2df3bbb03687431c082bc36c2563578065d47551ANALYSIS DATE: 2023-02-11T10:17:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]33:443

February 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 141[.]98[.]10[.]124:80

February 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 46[.]161[.]40[.]118:80

February 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]71[.]152[.]140:80

February 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – e29a4153e08b5b85b4a51f8a2cd2714e

February 11, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e29a4153e08b5b85b4a51f8a2cd2714eSHA1: 1a2056b4d141fcfc44f7132f31cba62d6f31d86dANALYSIS DATE: 2023-02-11T10:17:53ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – smokeloader – c418a430529db80b4daabd52c5c8adce

February 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c418a430529db80b4daabd52c5c8adceSHA1: 3fd4955aca9bb801a2cb337cb9acbb3f61fd4d07ANALYSIS DATE: 2023-02-11T10:39:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ryuk – 5ac0f050f93f86e69026faea1fbb4450

February 11, 2023

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, persistence, ransomwareMD5: 5ac0f050f93f86e69026faea1fbb4450SHA1: 9709774fde9ec740ad6fed8ed79903296ca9d571ANALYSIS DATE: 2023-02-11T10:59:29ZTTPS: T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0aeddad4b0aa26e2b46f2b1c498bda5c

February 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0aeddad4b0aa26e2b46f2b1c498bda5cSHA1: ab08be349ed68c56de52a04a502683a45f1020e5ANALYSIS DATE: 2023-02-11T11:34:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 162[.]19[.]206[.]0:80

February 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]142[.]246[.]194:8443

February 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

OSINT

Malware Analysis – ransomware – 82227eb7a8a71d665a79fbe0739eaeb8

Malware Analysis – banker – 6d25750129552f448405439eb4e90ca7

Malware Analysis – evasion – ea552c3e9806298e1d2c2246a5f01973

Malware Analysis – djvu – cd5df181c1ea27e3f45fdbf2a4d3f6ff

Malware Analysis – djvu – 796d4630165fe9d82db1830cd6a85fd2

Malware Analysis – djvu – 55fec0029f09cc415f47b670d65b8d85

Malware Analysis – smokeloader – 908a00fa64599d1f3e40e5926bb77548

Malware Analysis – djvu – 6b5b2f946394208759afe4848dc720ad

Malware Analysis – djvu – 83c3a77944c98ff33c27422973f498d4

Cobalt Stike Beacon Detected – 47[.]95[.]248[.]144:80

Malware Analysis – djvu – fba1dbb9208031a21bdb80cb60b23ad2

Malware Analysis – djvu – 93e58fa4667b20bddafb9a3d50a3f81f

Malware Analysis – ransomware – e7beb2fcccf55f27ed67eb9870362913

Malware Analysis – – 5af48fb2e7485ccee2b7c5bdf2ae9d4c

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]33:443

Cobalt Stike Beacon Detected – 141[.]98[.]10[.]124:80

Cobalt Stike Beacon Detected – 46[.]161[.]40[.]118:80

Cobalt Stike Beacon Detected – 124[.]71[.]152[.]140:80

Malware Analysis – ransomware – e29a4153e08b5b85b4a51f8a2cd2714e

Malware Analysis – smokeloader – c418a430529db80b4daabd52c5c8adce

Malware Analysis – ryuk – 5ac0f050f93f86e69026faea1fbb4450

Malware Analysis – smokeloader – 0aeddad4b0aa26e2b46f2b1c498bda5c

Cobalt Stike Beacon Detected – 162[.]19[.]206[.]0:80

Cobalt Stike Beacon Detected – 103[.]142[.]246[.]194:8443

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed