OSINT

Malware Analysis – evasion – 31c2e85ef5e4c0009e1f18794527b4ca

October 22, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 31c2e85ef5e4c0009e1f18794527b4caSHA1: 72c6643ed5e47d326f4b19744b7cbdbf43f46c8cANALYSIS DATE: 2022-10-22T03:09:48ZTTPS: T1060, T1112, T1107, T1490, T1031, T1562, T1489 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – 6a9ec5cbc5f370fed5e608e4a76e7122

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6a9ec5cbc5f370fed5e608e4a76e7122SHA1: bb93e4e90ce7f8a8a946760f93b2f910997d1450ANALYSIS DATE: 2022-10-22T03:13:16ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – d2c59a77d659c928936e7ecbb70a1118

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d2c59a77d659c928936e7ecbb70a1118SHA1: 68bd590e5ba983ac07faf401db295334b021c650ANALYSIS DATE: 2022-10-22T03:20:19ZTTPS: T1005, T1081, T1107, T1490, T1082, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 1fcf153f36a876d457efff998dead72c

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 1fcf153f36a876d457efff998dead72cSHA1: 1ac0b9ba651d7f417d1ab325b28f837686c25a13ANALYSIS DATE: 2022-10-22T03:21:26ZTTPS: T1107, T1490, T1091, T1060, T1112, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – fce8c51e58c56c4b50171f693e0fd1b1

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: fce8c51e58c56c4b50171f693e0fd1b1SHA1: ecdef3434cb874ecd346c8119ddb01e635fa7ddfANALYSIS DATE: 2022-10-22T03:21:12ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – persistence – 3c76e5f29228f78125b84f7aa10eda16

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 3c76e5f29228f78125b84f7aa10eda16SHA1: 323442e3f8e6f7e6131abe77de5287f709c6d62cANALYSIS DATE: 2022-10-22T03:20:55ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – persistence – ac700ee3d6fb249686ec5e39f1db966e

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: ac700ee3d6fb249686ec5e39f1db966eSHA1: 72e31b6ab578c6e9c73788ea3451bae06b82ef32ANALYSIS DATE: 2022-10-22T03:20:42ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – persistence – e58f35a9744ef863a648ba8d6cd9f016

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: e58f35a9744ef863a648ba8d6cd9f016SHA1: e82ec0f8db2456ae3a26655bb71444f42ff9f33eANALYSIS DATE: 2022-10-22T03:22:00ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – 1a5463cd36cb6d69914a54395cd367f6

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 1a5463cd36cb6d69914a54395cd367f6SHA1: 6041930b2c2bb26974811d47af8b101773826f7bANALYSIS DATE: 2022-10-22T03:21:52ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – 4105222b7f976596c444f23316c57617

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 4105222b7f976596c444f23316c57617SHA1: 922e2a5587cad70f6202442b9dac64c85fafab3bANALYSIS DATE: 2022-10-22T03:21:41ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – ab58f659f2d6d168c6960904291b9f29

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: ab58f659f2d6d168c6960904291b9f29SHA1: ee32780bf01b97c75a667656918da768fa8d89ecANALYSIS DATE: 2022-10-22T03:22:08ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – chaos – 257b508bd48ce9bbb447aeb76a69f013

October 22, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 257b508bd48ce9bbb447aeb76a69f013SHA1: c839ec022bf248560dc64ca42499836d1f2bee22ANALYSIS DATE: 2022-10-22T03:40:13ZTTPS: T1490, T1059, T1107, T1060, T1112, T1491,...

Malware Analysis – persistence – 93e43b823190659046c61d99e20c6486

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 93e43b823190659046c61d99e20c6486SHA1: 74c9ffb8bc1492acf3ff36fd3f8f19952af01b6eANALYSIS DATE: 2022-10-22T03:22:24ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – a6f270a986eb430d220f8cd21524c558

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: a6f270a986eb430d220f8cd21524c558SHA1: 14405ef1782d59890b1491ec06b763da2aaf7cd8ANALYSIS DATE: 2022-10-22T03:22:16ZTTPS: T1060, T1112, T1005, T1081, T1082, T1107, T1490, T1091...

Malware Analysis – ransomware – 5ea6d02733264d1f685c6bb009e45794

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5ea6d02733264d1f685c6bb009e45794SHA1: ab18b198dcb941fe1efea2fdd0b2908368218588ANALYSIS DATE: 2022-10-22T03:45:55ZTTPS: T1107, T1490, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – f623aa2147c701b68f8db4e3bb36701c

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f623aa2147c701b68f8db4e3bb36701cSHA1: 0f0d52901b8b662ed5ddea304bc55094c98879a5ANALYSIS DATE: 2022-10-22T03:54:36ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 2e12ce413e915c2a2a55fbff6646f058

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2e12ce413e915c2a2a55fbff6646f058SHA1: 66b782adfa1e70ab5530178ed74333fd8dac1845ANALYSIS DATE: 2022-10-22T03:49:34ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – smokeloader – 7dee1ab63f1a5d740024d881bfd38b54

October 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7dee1ab63f1a5d740024d881bfd38b54SHA1: 54549891251c81086f04ea8cc1ab8e9c7a36ae37ANALYSIS DATE: 2022-10-22T04:16:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – ba5e80f2d798e241471decd7fea5c32e

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ba5e80f2d798e241471decd7fea5c32eSHA1: 0a94f3a096002197befb9dd5e6611f0fba19cf8dANALYSIS DATE: 2022-10-22T03:50:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – a0f2cc9af0d1601244cf49c6921bd654

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a0f2cc9af0d1601244cf49c6921bd654SHA1: 56975fb26d55b42ceaff7b4f259a273be5e7549fANALYSIS DATE: 2022-10-22T04:19:05ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 8118f0eee6a59572daf1d5eb1055644d

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8118f0eee6a59572daf1d5eb1055644dSHA1: 47039fd9e7ee142959fcb90f8b911b8f0c656891ANALYSIS DATE: 2022-10-22T04:16:05ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – – ed7c1e85bb836319b8eb6f7cedafa7d5

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ed7c1e85bb836319b8eb6f7cedafa7d5SHA1: c354add9010891b2e5798cf9ec9703f8c8ae1082ANALYSIS DATE: 2022-10-22T04:19:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – f1c3e4fdca55ff6e6f8597a0a2713fdb

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f1c3e4fdca55ff6e6f8597a0a2713fdbSHA1: 82e40346a7489cf77b90aeb3a4cd287d3363eaf1ANALYSIS DATE: 2022-10-22T04:20:16ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 8ae5a35a6e434514f421e720aecab786

October 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8ae5a35a6e434514f421e720aecab786SHA1: 518ae303c6e50d29ab84765b49e94d9f34862599ANALYSIS DATE: 2022-10-22T04:21:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

OSINT

Malware Analysis – evasion – 31c2e85ef5e4c0009e1f18794527b4ca

Malware Analysis – persistence – 6a9ec5cbc5f370fed5e608e4a76e7122

Malware Analysis – ransomware – d2c59a77d659c928936e7ecbb70a1118

Malware Analysis – persistence – 1fcf153f36a876d457efff998dead72c

Malware Analysis – persistence – fce8c51e58c56c4b50171f693e0fd1b1

Malware Analysis – persistence – 3c76e5f29228f78125b84f7aa10eda16

Malware Analysis – persistence – ac700ee3d6fb249686ec5e39f1db966e

Malware Analysis – persistence – e58f35a9744ef863a648ba8d6cd9f016

Malware Analysis – persistence – 1a5463cd36cb6d69914a54395cd367f6

Malware Analysis – persistence – 4105222b7f976596c444f23316c57617

Malware Analysis – persistence – ab58f659f2d6d168c6960904291b9f29

Malware Analysis – chaos – 257b508bd48ce9bbb447aeb76a69f013

Malware Analysis – persistence – 93e43b823190659046c61d99e20c6486

Malware Analysis – persistence – a6f270a986eb430d220f8cd21524c558

Malware Analysis – ransomware – 5ea6d02733264d1f685c6bb009e45794

Malware Analysis – ransomware – f623aa2147c701b68f8db4e3bb36701c

Malware Analysis – djvu – 2e12ce413e915c2a2a55fbff6646f058

Malware Analysis – smokeloader – 7dee1ab63f1a5d740024d881bfd38b54

Malware Analysis – – ba5e80f2d798e241471decd7fea5c32e

Malware Analysis – ransomware – a0f2cc9af0d1601244cf49c6921bd654

Malware Analysis – djvu – 8118f0eee6a59572daf1d5eb1055644d

Malware Analysis – – ed7c1e85bb836319b8eb6f7cedafa7d5

Malware Analysis – ransomware – f1c3e4fdca55ff6e6f8597a0a2713fdb

Malware Analysis – smokeloader – 8ae5a35a6e434514f421e720aecab786

Cobalt Strike Beacon Detected – 111[.]229[.]187[.]190:9443

Cobalt Strike Beacon Detected – 43[.]138[.]0[.]179:9443

Cobalt Strike Beacon Detected – 113[.]45[.]232[.]73:9443

Cobalt Strike Beacon Detected – 1[.]95[.]0[.]62:8888

Cobalt Strike Beacon Detected – 47[.]109[.]201[.]173:8888

You may have missed