OSINT

Malware Analysis – chaos – 8ee79ded5497779cd7e0b46a876d09cf

November 1, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 8ee79ded5497779cd7e0b46a876d09cfSHA1: 3179b69d3f8fcc35e0386c7c1a70ce0269d03a3fANALYSIS DATE: 2022-11-01T05:36:19ZTTPS: T1490, T1059, T1107, T1082, T1491, T1112, T1005,...

Malware Analysis – ransomware – f34bc17d50dfbffaecab4b3f426aed49

November 1, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f34bc17d50dfbffaecab4b3f426aed49SHA1: 3be52623b3788b7d7492c743cab9fabb8754c237ANALYSIS DATE: 2022-11-01T05:37:38ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – aadd501e7f87ad9279eec57a5ea987ca

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: aadd501e7f87ad9279eec57a5ea987caSHA1: a378ed3f7e758e1c8389fdd33a1774ff5e38daa8ANALYSIS DATE: 2022-11-01T05:38:43ZTTPS: T1158, T1491, T1112, T1060, T1107,...

Malware Analysis – wannacry – ab9f94f05ce248f32989529ad31f6a58

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: ab9f94f05ce248f32989529ad31f6a58SHA1: d17160bfcf0c17dcf50eebaee4bbaf8f7d220df3ANALYSIS DATE: 2022-11-01T05:38:38ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – babuk – 8e18c2da2c202697eb9552c07db3be1c

November 1, 2022

Score: 10 MALWARE FAMILY: babukTAGS:family:babuk, ransomwareMD5: 8e18c2da2c202697eb9552c07db3be1cSHA1: 93d20b75e18dd53ed16215262f43c1074e55f025ANALYSIS DATE: 2022-11-01T05:37:40ZTTPS: T1082, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – wannacry – 761fd6c82180421aa39bf04182ec3f11

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 761fd6c82180421aa39bf04182ec3f11SHA1: a2068f92316993137cb3d47b13d018dfcebcb13dANALYSIS DATE: 2022-11-01T05:38:31ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 34b2fff498fd17c625649b957373e676

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 34b2fff498fd17c625649b957373e676SHA1: b03a94807620159b69240e74aa6c88b8a36096e0ANALYSIS DATE: 2022-11-01T05:39:30ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 07e0ad4a92e0ccd54bbccf2fa459c0ed

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 07e0ad4a92e0ccd54bbccf2fa459c0edSHA1: 353b03de9345510a14cd2999bafbe27641dc367cANALYSIS DATE: 2022-11-01T05:39:13ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 96179101f776c0584e3346cb1d1370dd

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 96179101f776c0584e3346cb1d1370ddSHA1: 21eb0f89b7f50795269065a76664e86b00206483ANALYSIS DATE: 2022-11-01T05:39:01ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – bc18e8c27142dcf420699175dda2c6a8

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: bc18e8c27142dcf420699175dda2c6a8SHA1: 596b77c461e0ec8c72087ade6482f8565767bca5ANALYSIS DATE: 2022-11-01T05:39:25ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 05684d41163d03eb3c6c77c6847a1f7e

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 05684d41163d03eb3c6c77c6847a1f7eSHA1: d8b5ea646e7353c445339812c4597b275533c324ANALYSIS DATE: 2022-11-01T05:40:11ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – eda52d122490d82a632607af6f14692a

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: eda52d122490d82a632607af6f14692aSHA1: 4c0b8d04de0466e0de6d78e91906733848e1b12eANALYSIS DATE: 2022-11-01T05:39:50ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 22e0ffb0ea5922d9c40436e575c67b4b

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 22e0ffb0ea5922d9c40436e575c67b4bSHA1: 54c6e125db94fd99d152b17b2c35c8fc12f43615ANALYSIS DATE: 2022-11-01T05:39:57ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – ab55281ebac6036c3537ecf2132d3fd3

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: ab55281ebac6036c3537ecf2132d3fd3SHA1: 2d447e5b854a005035bcaf62316c1db72fcce4cfANALYSIS DATE: 2022-11-01T05:40:03ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

OSINT

Malware Analysis – chaos – 8ee79ded5497779cd7e0b46a876d09cf

Malware Analysis – ransomware – f34bc17d50dfbffaecab4b3f426aed49

Malware Analysis – wannacry – aadd501e7f87ad9279eec57a5ea987ca

Malware Analysis – wannacry – ab9f94f05ce248f32989529ad31f6a58

Malware Analysis – babuk – 8e18c2da2c202697eb9552c07db3be1c

Malware Analysis – wannacry – 761fd6c82180421aa39bf04182ec3f11

Malware Analysis – wannacry – 34b2fff498fd17c625649b957373e676

Malware Analysis – wannacry – 07e0ad4a92e0ccd54bbccf2fa459c0ed

Malware Analysis – wannacry – 96179101f776c0584e3346cb1d1370dd

Malware Analysis – wannacry – bc18e8c27142dcf420699175dda2c6a8

Malware Analysis – wannacry – 05684d41163d03eb3c6c77c6847a1f7e

Malware Analysis – wannacry – eda52d122490d82a632607af6f14692a

Malware Analysis – wannacry – 22e0ffb0ea5922d9c40436e575c67b4b

Malware Analysis – wannacry – ab55281ebac6036c3537ecf2132d3fd3

Cobalt Stike Beacon Detected – 43[.]143[.]174[.]165:80

Cobalt Stike Beacon Detected – 123[.]56[.]222[.]253:9999

Cobalt Stike Beacon Detected – 81[.]69[.]198[.]61:80

Cobalt Stike Beacon Detected – 101[.]132[.]70[.]185:8087

Cobalt Stike Beacon Detected – 14[.]39[.]241[.]105:443

Cobalt Stike Beacon Detected – 159[.]203[.]111[.]38:443

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]48:80

Cobalt Stike Beacon Detected – 43[.]138[.]72[.]58:9999

Cobalt Stike Beacon Detected – 194[.]55[.]186[.]90:443

Cobalt Stike Beacon Detected – 119[.]28[.]101[.]125:8000

[INTERLOCK] – Ransomware Victim: In’Tech Industries

[ARKANA] – Ransomware Victim: Ticketmaster

Cobalt Strike Beacon Detected – 8[.]140[.]239[.]162:81

Cobalt Strike Beacon Detected – 62[.]234[.]185[.]105:80

Cobalt Strike Beacon Detected – 8[.]138[.]252[.]191:8081

You may have missed