OSINT

Malware Analysis – amadey – 1a48121a07ef0fdc4f7ac9ca20e536a0

October 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, collection, persistence, ransomware, spyware, stealer, trojanMD5: 1a48121a07ef0fdc4f7ac9ca20e536a0SHA1: 5718d66e3347a41e725dd15c48a46001c90adf04ANALYSIS DATE: 2022-10-28T21:22:55ZTTPS: T1012, T1120, T1082, T1053, T1060,...

Malware Analysis – – ae676204ce9a3be542572c477a3f6fdc

October 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ae676204ce9a3be542572c477a3f6fdcSHA1: 1d1e9d95fc4dd709fb77e15c4d09b86793091a4cANALYSIS DATE: 2022-10-28T21:00:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – de1dd46f1db579b973d83f19b9b56e46

October 29, 2022

Score: 3 MALWARE FAMILY: TAGS:MD5: de1dd46f1db579b973d83f19b9b56e46SHA1: ace23bb2da65f550dcba125ffb0746987b60908fANALYSIS DATE: 2022-10-28T20:59:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 174[.]139[.]150[.]250:8080

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]93:443

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]3:80

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 118[.]195[.]221[.]189:443

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – be097e351869db5ba0b51d825111ba45

October 29, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – wannacry – 015362445a39c40edbe754fba2287fcd

October 29, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 015362445a39c40edbe754fba2287fcdSHA1: 3d063a1b1b5b426ae5bbffd21d5c38037289f662ANALYSIS DATE: 2022-10-28T21:40:21ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – amadey – 497ced44c4014b27093f2ae816385566

October 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, collection, persistence, ransomware, spyware, stealer, trojanMD5: 497ced44c4014b27093f2ae816385566SHA1: 9b3270a0c299774b13a0cd44d9d34c963a3e9c53ANALYSIS DATE: 2022-10-28T22:15:21ZTTPS: T1012, T1082, T1053, T1060, T1112,...

Malware Analysis – smokeloader – 539c6eaa3bd26db45d665ee0cb451a34

October 29, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 539c6eaa3bd26db45d665ee0cb451a34SHA1: 7556f8f25e8334b6315bb142fbe69e800cb0445cANALYSIS DATE: 2022-10-28T22:13:01ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]20:443

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 142[.]93[.]141[.]97:80

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]198[.]122[.]88:443

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]1[.]210[.]152:443

October 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – 594b304aee7675b95252fcc3b2d8a5e8

October 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, collection, persistence, ransomware, spyware, stealer, trojanMD5: 594b304aee7675b95252fcc3b2d8a5e8SHA1: 4b027f20e18e8fbf948892d988c58da7c9345142ANALYSIS DATE: 2022-10-28T22:31:12ZTTPS: T1082, T1053, T1060, T1112, T1012,...

Malware Analysis – djvu – 55349c935b37c7ee86a604294e84adca

October 29, 2022

Malware Analysis – ransomware – 2010f94a111ab8d9e0a25d7aefd2704e

October 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2010f94a111ab8d9e0a25d7aefd2704eSHA1: cc5fb0d3c2ac669a04ce073e2023200107a1846aANALYSIS DATE: 2022-10-28T22:25:35ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – modiloader – 0035656d78ae0d0157e48d811db274a8

October 29, 2022

Score: 10 MALWARE FAMILY: modiloaderTAGS:family:modiloader, family:xorist, discovery, persistence, ransomware, spyware, stealer, trojan, upxMD5: 0035656d78ae0d0157e48d811db274a8SHA1: b7a111880537ae69776e76e245d66571445af5b6ANALYSIS DATE: 2022-10-28T22:32:46ZTTPS: T1082, T1005, T1081,...

Multiple vulnerabilities affect the Juniper Junos OS

October 28, 2022

Juniper Networks devices are affected by multiple high-severity issues, including code execution vulnerabilities. Multiple high-severity security vulnerabilities have been discovered...

Malware Analysis – ransomware – cea35bc1542ac01142b43cf76059e5bd

October 28, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: cea35bc1542ac01142b43cf76059e5bdSHA1: 931e2269210b4bd685135bbbca60fdf137c8feacANALYSIS DATE: 2022-10-28T14:40:19ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 5266dba7e5fcb139b845e5448b5d4fc1

October 28, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:google2, botnet:mario23_10, botnet:slovarik15btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – ransomware – 014af23e0f192996f18fbe9ce89cdba1

October 28, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 014af23e0f192996f18fbe9ce89cdba1SHA1: 0636b7c87b68fd9318dbf5f3b8bbf4429576c1a3ANALYSIS DATE: 2022-10-28T14:40:25ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – ce5cd688addcb52e4ea72b36bd84c153

October 28, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ce5cd688addcb52e4ea72b36bd84c153SHA1: df3be67ef95a72d3921438b83af37b52a1d4fcadANALYSIS DATE: 2022-10-28T15:00:28ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

OSINT

Malware Analysis – amadey – 1a48121a07ef0fdc4f7ac9ca20e536a0

Malware Analysis – – ae676204ce9a3be542572c477a3f6fdc

Malware Analysis – – de1dd46f1db579b973d83f19b9b56e46

Cobalt Stike Beacon Detected – 174[.]139[.]150[.]250:8080

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]93:443

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]3:80

Cobalt Stike Beacon Detected – 118[.]195[.]221[.]189:443

Malware Analysis – djvu – be097e351869db5ba0b51d825111ba45

Malware Analysis – wannacry – 015362445a39c40edbe754fba2287fcd

Malware Analysis – amadey – 497ced44c4014b27093f2ae816385566

Malware Analysis – smokeloader – 539c6eaa3bd26db45d665ee0cb451a34

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]20:443

Cobalt Stike Beacon Detected – 142[.]93[.]141[.]97:80

Cobalt Stike Beacon Detected – 139[.]198[.]122[.]88:443

Cobalt Stike Beacon Detected – 37[.]1[.]210[.]152:443

Malware Analysis – amadey – 594b304aee7675b95252fcc3b2d8a5e8

Malware Analysis – djvu – 55349c935b37c7ee86a604294e84adca

Malware Analysis – ransomware – 2010f94a111ab8d9e0a25d7aefd2704e

Malware Analysis – modiloader – 0035656d78ae0d0157e48d811db274a8

Multiple vulnerabilities affect the Juniper Junos OS

Malware Analysis – ransomware – cea35bc1542ac01142b43cf76059e5bd

Malware Analysis – djvu – 5266dba7e5fcb139b845e5448b5d4fc1

Malware Analysis – ransomware – 014af23e0f192996f18fbe9ce89cdba1

Malware Analysis – ransomware – ce5cd688addcb52e4ea72b36bd84c153

Unveiling the Hidden Dangers of Advanced Persistent Threats

WiredBucks – 918,529 breached accounts

[TEAMXXX] – Ransomware Victim: ebberrestaurantgroup[.]com

Cobalt Strike Beacon Detected – 43[.]252[.]229[.]158:9898

Cobalt Strike Beacon Detected – 47[.]113[.]217[.]92:8000

You may have missed