OSINT

Malware Analysis – persistence – 04bf83dec81eb1a97e9cbf9a2c66477a

November 27, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 04bf83dec81eb1a97e9cbf9a2c66477aSHA1: 71308c2f4bc770869eee039107e9bd5830e37decANALYSIS DATE: 2022-11-26T15:06:01ZTTPS: T1112, T1060, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 9116620dd952b111a965149e8084d9b7

November 27, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: 9116620dd952b111a965149e8084d9b7SHA1: 3278dc27b7c78531dec44e5d7e54988c38c794adANALYSIS DATE: 2022-11-26T15:47:27ZTTPS: T1082, T1112, T1491 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – discovery – 0ae0a6a9b090ff1645468003f45c4966

November 27, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 0ae0a6a9b090ff1645468003f45c4966SHA1: 08f3983824bf49b1b6ea24b8e60c9ed1b026d0abANALYSIS DATE: 2022-11-27T05:22:32ZTTPS: T1012, T1082, T1112, T1042, T1120, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – amadey – ba7cc918a507055f9e7b5fd0a0910253

November 27, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: ba7cc918a507055f9e7b5fd0a0910253SHA1: 785f6fa2c6464dc2eb1956ee1eac9a57efa514a6ANALYSIS DATE:...

Malware Analysis – evasion – 5e87b99a8a3b341784705537435db706

November 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 5e87b99a8a3b341784705537435db706SHA1: 5d57569e0566897135d3b24b8f7007ab5f16f29cANALYSIS DATE: 2022-11-27T04:41:29ZTTPS: T1088, T1089, T1112, T1004, T1102, T1012, T1082, T1491...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 27, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 27, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Malware Analysis – ransomware – 18da21337a68b2edf0abedc4a6cb6b0c

November 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 18da21337a68b2edf0abedc4a6cb6b0cSHA1: a42a59f6a2a778ece6cdf55d58ba58243e06a57cANALYSIS DATE: 2022-11-26T07:32:30ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:3079

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:32764

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – persistence – ddca4d55e0b4c7e729f2a27721f6f957

November 27, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: ddca4d55e0b4c7e729f2a27721f6f957SHA1: 7e48c9dc3e44db4e7a72eb01f3f57c8866c7946cANALYSIS DATE: 2022-11-26T08:26:20ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 1fc4f7c736f8b793657c5c9f368cfdd0

November 27, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 1fc4f7c736f8b793657c5c9f368cfdd0SHA1: bc39639ad5c168d324e0a097310e554e911c6fc6ANALYSIS DATE: 2022-11-26T07:32:49ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – d0621244cd1dbe77805e16706f9a58f7

November 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d0621244cd1dbe77805e16706f9a58f7SHA1: 697dccafecff4e1c81386fd6f8f6b0eb37af8872ANALYSIS DATE: 2022-11-26T08:23:59ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 521bd488a5de44d84e9d145d3eb8a238

November 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 521bd488a5de44d84e9d145d3eb8a238SHA1: a9086094ba2eaa8dc6ff046788ccd441136ad692ANALYSIS DATE: 2022-11-26T08:25:53ZTTPS: T1491, T1112, T1107, T1490, T1012, T1082 ScoreMeaningExample10Known badA malware family was...

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:2008

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]71[.]47[.]64:444

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 116[.]196[.]108[.]157:81

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]134[.]155[.]21:80

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ctblocker – d8704f06cb0813c2cbb543b95fda51ce

November 27, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: d8704f06cb0813c2cbb543b95fda51ceSHA1: 987886e485ecf443002159065411e42cb0dfc264ANALYSIS DATE: 2022-11-26T08:59:59ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – a9d1f6ab9f83e46f0a3c6b1d2b8cafd2

November 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a9d1f6ab9f83e46f0a3c6b1d2b8cafd2SHA1: a1204f18c910fff65daa7f43d31a3fef5f2910d1ANALYSIS DATE: 2022-11-26T09:00:01ZTTPS: T1491, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ctblocker – eef171f1c62bcec4835b8f806a772766

November 27, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: eef171f1c62bcec4835b8f806a772766SHA1: 5e2f0fc5300f3d394e00abbc34f687215ba87bb6ANALYSIS DATE: 2022-11-26T09:00:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – f47b209aa25c3426286be59241c54080

November 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f47b209aa25c3426286be59241c54080SHA1: 5ea33d22675205abee0456816607df747f1d8fd9ANALYSIS DATE: 2022-11-26T08:32:35ZTTPS: T1082, T1107, T1490, T1491, T1112, T1012 ScoreMeaningExample10Known badA malware family was...

Cobalt Stike Beacon Detected – 89[.]147[.]109[.]202:443

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 18[.]133[.]195[.]61:4433

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

OSINT

Malware Analysis – persistence – 04bf83dec81eb1a97e9cbf9a2c66477a

Malware Analysis – ransomware – 9116620dd952b111a965149e8084d9b7

Malware Analysis – discovery – 0ae0a6a9b090ff1645468003f45c4966

Malware Analysis – amadey – ba7cc918a507055f9e7b5fd0a0910253

Malware Analysis – evasion – 5e87b99a8a3b341784705537435db706

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

Malware Analysis – ransomware – 18da21337a68b2edf0abedc4a6cb6b0c

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:3079

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:32764

Malware Analysis – persistence – ddca4d55e0b4c7e729f2a27721f6f957

Malware Analysis – discovery – 1fc4f7c736f8b793657c5c9f368cfdd0

Malware Analysis – ransomware – d0621244cd1dbe77805e16706f9a58f7

Malware Analysis – ransomware – 521bd488a5de44d84e9d145d3eb8a238

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:2008

Cobalt Stike Beacon Detected – 81[.]71[.]47[.]64:444

Cobalt Stike Beacon Detected – 116[.]196[.]108[.]157:81

Cobalt Stike Beacon Detected – 8[.]134[.]155[.]21:80

Malware Analysis – ctblocker – d8704f06cb0813c2cbb543b95fda51ce

Malware Analysis – ransomware – a9d1f6ab9f83e46f0a3c6b1d2b8cafd2

Malware Analysis – ctblocker – eef171f1c62bcec4835b8f806a772766

Malware Analysis – ransomware – f47b209aa25c3426286be59241c54080

Cobalt Stike Beacon Detected – 89[.]147[.]109[.]202:443

Cobalt Stike Beacon Detected – 18[.]133[.]195[.]61:4433

Cobalt Strike Beacon Detected – 193[.]112[.]83[.]36:8080

Cobalt Strike Beacon Detected – 60[.]204[.]245[.]37:8080

Cobalt Strike Beacon Detected – 118[.]24[.]117[.]221:8080

Cobalt Strike Beacon Detected – 47[.]120[.]13[.]85:8889

Cobalt Strike Beacon Detected – 20[.]41[.]73[.]175:8080

You may have missed