OSINT

Malware Analysis – evasion – 8186d79cfe414a8e836687e69d1056f0

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 8186d79cfe414a8e836687e69d1056f0SHA1: ed15b62bb0d78d811d6be374b08eda002f9778e0ANALYSIS DATE: 2022-10-20T12:07:27ZTTPS: T1082, T1112, T1158, T1005, T1081, T1012,...

Malware Analysis – evasion – 80dabf1be0a3d1a01226c68b22a52470

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 80dabf1be0a3d1a01226c68b22a52470SHA1: 0984fbeb65507b41829ddd453e07a39f64c606a9ANALYSIS DATE: 2022-10-20T12:07:38ZTTPS: T1060, T1112, T1088, T1089, T1004, T1158,...

Malware Analysis – evasion – 812b7d93dce35132959c15ae456026f0

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 812b7d93dce35132959c15ae456026f0SHA1: 4f662d1337c809b5066f22263a738009d6730fa2ANALYSIS DATE: 2022-10-20T12:07:24ZTTPS: T1012, T1082, T1060, T1112, T1004, T1158,...

Malware Analysis – – cfc1dcfc561553a188e2feb6c76fd508

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: cfc1dcfc561553a188e2feb6c76fd508SHA1: bcc77b9ed189d775129471ddc439b79c0c2a17deANALYSIS DATE: 2022-10-22T02:09:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – ba9fc3bdca857bc4e0f9a4803c1c0dee

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ba9fc3bdca857bc4e0f9a4803c1c0deeSHA1: 605bfe3a0212da3231e0c4a74a4ac2e07bf3f6d2ANALYSIS DATE: 2022-10-22T02:14:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 25d19a52635910583e2d7ae9838dafc1

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 25d19a52635910583e2d7ae9838dafc1SHA1: 79d3eafc12de06b7d9aa24a0341bd92a40e05586ANALYSIS DATE: 2022-10-22T02:09:32ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 6ddeb9f7d1a1280673d8ce9275ae688d

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 6ddeb9f7d1a1280673d8ce9275ae688dSHA1: 0d114b641ce91822410fcb575c608b3c20e47e20ANALYSIS DATE: 2022-10-22T02:12:19ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – danabot – 9bfcec5239f026bcd06dc1b0e7df8852

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 9bfcec5239f026bcd06dc1b0e7df8852SHA1: 79948e48db5ae58b941a4b91eb7e8ae0596c37b2ANALYSIS...

Malware Analysis – – 1cd84ea4ac040c4ff441233daf58c307

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 1cd84ea4ac040c4ff441233daf58c307SHA1: cea559e9780763a792639639a12adc419bf9f6adANALYSIS DATE: 2022-10-22T02:18:34ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – fd84da34b45b9d0a42923e804b3d1e51

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: fd84da34b45b9d0a42923e804b3d1e51SHA1: 33f2082ecec70e4f96b8b9ff70e14f40fb8462f3ANALYSIS DATE: 2022-10-22T02:15:47ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 8169508a44729d8207958a0b64786b82

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 8169508a44729d8207958a0b64786b82SHA1: bf9ffc56112bbde8f19bba40fcec0ee9ece36500ANALYSIS DATE: 2022-10-22T02:18:55ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – ddce5db099bab8bc56d5ac70d83842a0

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ddce5db099bab8bc56d5ac70d83842a0SHA1: 7cd97f3e7a64cf10727ffff9634b9f2f0ed69c9dANALYSIS DATE: 2022-10-22T02:20:15ZTTPS: T1082, T1107, T1490, T1031, T1562, T1489, T1012, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 061b3060475cf1621085f4d8b0d2a7cb

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 061b3060475cf1621085f4d8b0d2a7cbSHA1: 257e65d78d69ec014f99ed93f2bbb56e96bf4a18ANALYSIS DATE: 2022-10-22T03:00:21ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – – 0f3d3d2005e3f5e5dad6470513e6ff0e

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 0f3d3d2005e3f5e5dad6470513e6ff0eSHA1: f86f08d34889e9305b5dac5c0ada0b87a1918ebeANALYSIS DATE: 2022-10-22T02:21:42ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – danabot – fedd130906924384c948ec3fb50ae2c7

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: fedd130906924384c948ec3fb50ae2c7SHA1: bb15742412d20fad379dc4f655bdb93df9196593ANALYSIS...

Malware Analysis – ransomware – 0ecb8b40f5fa991542fea3dd38f9f6af

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0ecb8b40f5fa991542fea3dd38f9f6afSHA1: 4c630bfc8fd146031410ebeab705b6128f740f69ANALYSIS DATE: 2022-10-22T03:00:44ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 8eedd3511eefee9608177fbe23df5e15

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8eedd3511eefee9608177fbe23df5e15SHA1: 2730d751393d6b16369b57adb3d7543566725a1bANALYSIS DATE: 2022-10-22T03:00:37ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 92d139263cdfea096dfa88b762cad95f

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 92d139263cdfea096dfa88b762cad95fSHA1: b3f79990262f99862492d42c80504106cd6d3847ANALYSIS DATE: 2022-10-22T03:00:33ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – b44246c1a4dec2da88d25828f4a3c568

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b44246c1a4dec2da88d25828f4a3c568SHA1: 654e2fe494f56cd2f15202638f5740ba36a4a585ANALYSIS DATE: 2022-10-22T03:00:27ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – danabot – 391bf3b75a97a702116de6c4da5728ee

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 391bf3b75a97a702116de6c4da5728eeSHA1: 159aa51c30f89fe432fbf2455cf55dc4d59a864bANALYSIS...

Malware Analysis – persistence – d586f9febbcc97f4671bc43c0ee0b7bd

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: d586f9febbcc97f4671bc43c0ee0b7bdSHA1: b0b73ecec702c6c7668bf9b4935f653c034e4ea6ANALYSIS DATE: 2022-10-22T03:03:54ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dharma – 922c5c0b02c8d6b2a13fa81ae06b8fe7

October 22, 2022

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 922c5c0b02c8d6b2a13fa81ae06b8fe7SHA1: bc7ce36da4ddbe1e9a46aca42da480391d618890ANALYSIS DATE: 2022-10-22T03:01:29ZTTPS: T1107, T1490, T1005, T1081, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – wannacry – 29272ff2d360fbf1e8efe1e176c90a21

October 22, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 29272ff2d360fbf1e8efe1e176c90a21SHA1: f7b4d527981d19b095b433277155971ea8e60373ANALYSIS DATE: 2022-10-22T03:00:53ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 6556f8919249fefdb5a3b6576162bbce

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 6556f8919249fefdb5a3b6576162bbceSHA1: 8a030a6800a4bb5acd2709bc043ccaca57e6d2bdANALYSIS DATE: 2022-10-22T03:20:30ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

OSINT

Malware Analysis – evasion – 8186d79cfe414a8e836687e69d1056f0

Malware Analysis – evasion – 80dabf1be0a3d1a01226c68b22a52470

Malware Analysis – evasion – 812b7d93dce35132959c15ae456026f0

Malware Analysis – – cfc1dcfc561553a188e2feb6c76fd508

Malware Analysis – – ba9fc3bdca857bc4e0f9a4803c1c0dee

Malware Analysis – – 25d19a52635910583e2d7ae9838dafc1

Malware Analysis – – 6ddeb9f7d1a1280673d8ce9275ae688d

Malware Analysis – danabot – 9bfcec5239f026bcd06dc1b0e7df8852

Malware Analysis – – 1cd84ea4ac040c4ff441233daf58c307

Malware Analysis – – fd84da34b45b9d0a42923e804b3d1e51

Malware Analysis – – 8169508a44729d8207958a0b64786b82

Malware Analysis – evasion – ddce5db099bab8bc56d5ac70d83842a0

Malware Analysis – djvu – 061b3060475cf1621085f4d8b0d2a7cb

Malware Analysis – – 0f3d3d2005e3f5e5dad6470513e6ff0e

Malware Analysis – danabot – fedd130906924384c948ec3fb50ae2c7

Malware Analysis – ransomware – 0ecb8b40f5fa991542fea3dd38f9f6af

Malware Analysis – ransomware – 8eedd3511eefee9608177fbe23df5e15

Malware Analysis – ransomware – 92d139263cdfea096dfa88b762cad95f

Malware Analysis – ransomware – b44246c1a4dec2da88d25828f4a3c568

Malware Analysis – danabot – 391bf3b75a97a702116de6c4da5728ee

Malware Analysis – persistence – d586f9febbcc97f4671bc43c0ee0b7bd

Malware Analysis – dharma – 922c5c0b02c8d6b2a13fa81ae06b8fe7

Malware Analysis – wannacry – 29272ff2d360fbf1e8efe1e176c90a21

Malware Analysis – ransomware – 6556f8919249fefdb5a3b6576162bbce

Cobalt Strike Beacon Detected – 111[.]229[.]187[.]190:9443

Cobalt Strike Beacon Detected – 43[.]138[.]0[.]179:9443

Cobalt Strike Beacon Detected – 113[.]45[.]232[.]73:9443

Cobalt Strike Beacon Detected – 1[.]95[.]0[.]62:8888

Cobalt Strike Beacon Detected – 47[.]109[.]201[.]173:8888

You may have missed