OSINT

Malware Analysis – ctblocker – 102c9d8d99c9f453053d1f49620df11f

November 30, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: 102c9d8d99c9f453053d1f49620df11fSHA1: 47ab2f2f660832e3a38f6dee882431a5a2404729ANALYSIS DATE: 2022-11-28T16:24:40ZTTPS: T1107, T1490, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 58b665b48142c0393c37b1670a6a8219

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 58b665b48142c0393c37b1670a6a8219SHA1: 4fe552a6e78df10406c25c926c862c9101716a04ANALYSIS DATE: 2022-11-28T16:24:34ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 53f7cd1bbe61d32ff9368d39efcd8cea

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 53f7cd1bbe61d32ff9368d39efcd8ceaSHA1: 597ffcc050192a3aa8e48fb59f97d4a332164529ANALYSIS DATE: 2022-11-28T16:24:36ZTTPS: T1060, T1112, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 7d63af3bc3bcf67c0467a136f29ff245

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 7d63af3bc3bcf67c0467a136f29ff245SHA1: d6b72b32c8d9709e7499dfa6f50765030900ac26ANALYSIS DATE: 2022-11-28T16:24:42ZTTPS: T1107, T1490, T1112, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 6d9472c60fb95b14bbf90978d0502217

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 6d9472c60fb95b14bbf90978d0502217SHA1: bd9d0cc75c5726c21423975df0d54abea4db9694ANALYSIS DATE: 2022-11-28T16:25:05ZTTPS: T1112, T1107, T1490, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 3fe889b5b2eff8f124317ee49d65d308

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 3fe889b5b2eff8f124317ee49d65d308SHA1: e1f380e3c8ad73c63037e78f8e114c31606f8b74ANALYSIS DATE: 2022-11-28T16:25:03ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – fd6dd1be61713fd5c0ddb78288c49bcf

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: fd6dd1be61713fd5c0ddb78288c49bcfSHA1: a88ea1443036821305b5229276fe815beb54b810ANALYSIS DATE: 2022-11-28T16:25:10ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – aaf64a5bd9446314cbd37b05bef5e84d

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: aaf64a5bd9446314cbd37b05bef5e84dSHA1: 4014eb5b41292bd6cb895f15a423052a05303c81ANALYSIS DATE: 2022-11-28T16:25:00ZTTPS: T1112, T1107, T1490, T1082, T1060 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 120[.]48[.]81[.]134:443

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 3[.]65[.]42[.]215:443

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – 3a19d13b39f329aafd9cf7e0b51c563c

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 3a19d13b39f329aafd9cf7e0b51c563cSHA1: b5a123254a544d4fb93a9cfb77b3cdf784491a68ANALYSIS DATE: 2022-11-28T16:36:08ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 8161f767ecddd356ecab740de272f0d7

November 30, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 8161f767ecddd356ecab740de272f0d7SHA1: 7c2b6a4ba08e3ec1313a889455ba2a32f64797b6ANALYSIS DATE: 2022-11-28T16:30:30ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – e094ae1a0e6c03fc4038fdd484349be7

November 30, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e094ae1a0e6c03fc4038fdd484349be7SHA1: 917b776ce2429cee8ee4ad837d9952906cb82127ANALYSIS DATE: 2022-11-28T16:30:46ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 9c3901f10998c40021f36d407a87c31a

November 30, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 9c3901f10998c40021f36d407a87c31aSHA1: b4f433c15c722bd9485d609bf5d93790369ad853ANALYSIS DATE: 2022-11-28T16:32:38ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Cobalt Stike Beacon Detected – 81[.]69[.]30[.]152:8012

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]142[.]171[.]59:25565

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]73[.]131[.]6:443

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]182[.]20[.]17:443

November 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – e8f2e9dfe20066773c30ce6bcd6153bd

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: e8f2e9dfe20066773c30ce6bcd6153bdSHA1: ea044ea4d8d5bdfe62389e338a8e6f89ac2b8775ANALYSIS DATE: 2022-11-28T16:36:12ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 13d8d4a482cfcb67c2281e84b4f756a3

November 30, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 13d8d4a482cfcb67c2281e84b4f756a3SHA1: b3e07b303b598f42f8a79ba36ced4f1cf96504d6ANALYSIS DATE: 2022-11-28T16:41:45ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 5210f168f2d7f59b5b9c3f66e58b205c

November 30, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 5210f168f2d7f59b5b9c3f66e58b205cSHA1: 0d669740f1ec1a6e87ceb22239b70616dfce37c9ANALYSIS DATE: 2022-11-28T17:25:33ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – f11f9d800e0130517df79e019dbae757

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: f11f9d800e0130517df79e019dbae757SHA1: b9055d16e6a24d9bf829d63b4a370b70cd1ce84aANALYSIS DATE: 2022-11-28T16:36:10ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 033d1c48ba9d6bdd28dd6c9395e25fd6

November 30, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 033d1c48ba9d6bdd28dd6c9395e25fd6SHA1: d07af7ceec86afba00750009df90a8604d5b1502ANALYSIS DATE: 2022-11-29T21:45:00ZTTPS: T1490, T1059, T1107, T1070, T1485, T1082, T1012, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – ragnarlocker – 9bfb49abbfea8f5f8b89f2f377e973e1

November 30, 2022

Score: 10 MALWARE FAMILY: ragnarlockerTAGS:family:ragnarlocker, bootkit, evasion, persistence, ransomwareMD5: 9bfb49abbfea8f5f8b89f2f377e973e1SHA1: 9acb987a295ab88ded9b20ab8cdb97c0ecdc0734ANALYSIS DATE: 2022-11-29T21:56:53ZTTPS: T1490, T1107, T1067, T1012, T1120, T1082 ScoreMeaningExample10Known...

OSINT

Malware Analysis – ctblocker – 102c9d8d99c9f453053d1f49620df11f

Malware Analysis – evasion – 58b665b48142c0393c37b1670a6a8219

Malware Analysis – evasion – 53f7cd1bbe61d32ff9368d39efcd8cea

Malware Analysis – evasion – 7d63af3bc3bcf67c0467a136f29ff245

Malware Analysis – evasion – 6d9472c60fb95b14bbf90978d0502217

Malware Analysis – evasion – 3fe889b5b2eff8f124317ee49d65d308

Malware Analysis – evasion – fd6dd1be61713fd5c0ddb78288c49bcf

Malware Analysis – evasion – aaf64a5bd9446314cbd37b05bef5e84d

Cobalt Stike Beacon Detected – 120[.]48[.]81[.]134:443

Cobalt Stike Beacon Detected – 3[.]65[.]42[.]215:443

Malware Analysis – evasion – 3a19d13b39f329aafd9cf7e0b51c563c

Malware Analysis – persistence – 8161f767ecddd356ecab740de272f0d7

Malware Analysis – persistence – e094ae1a0e6c03fc4038fdd484349be7

Malware Analysis – discovery – 9c3901f10998c40021f36d407a87c31a

Cobalt Stike Beacon Detected – 81[.]69[.]30[.]152:8012

Cobalt Stike Beacon Detected – 8[.]142[.]171[.]59:25565

Cobalt Stike Beacon Detected – 77[.]73[.]131[.]6:443

Cobalt Stike Beacon Detected – 107[.]182[.]20[.]17:443

Malware Analysis – evasion – e8f2e9dfe20066773c30ce6bcd6153bd

Malware Analysis – persistence – 13d8d4a482cfcb67c2281e84b4f756a3

Malware Analysis – persistence – 5210f168f2d7f59b5b9c3f66e58b205c

Malware Analysis – evasion – f11f9d800e0130517df79e019dbae757

Malware Analysis – evasion – 033d1c48ba9d6bdd28dd6c9395e25fd6

Malware Analysis – ragnarlocker – 9bfb49abbfea8f5f8b89f2f377e973e1

Mastering Security Assessment and Testing to Protect Your Digital Assets

[INCRANSOM] – Ransomware Victim: teampostop[.]net

Cobalt Strike Beacon Detected – 101[.]34[.]66[.]77:443

Cobalt Strike Beacon Detected – 119[.]45[.]29[.]172:8089

Cobalt Strike Beacon Detected – 120[.]46[.]131[.]34:443

You may have missed