OSINT

Malware Analysis – jigsaw – c2c5848ec8ae11e84d42521c527f75ca

December 2, 2022

Score: 10 MALWARE FAMILY: jigsawTAGS:family:jigsaw, persistence, ransomwareMD5: c2c5848ec8ae11e84d42521c527f75caSHA1: d8d98dff64297d4cf8a227a2c138efc4774942b2ANALYSIS DATE: 2022-11-30T18:03:30ZTTPS: T1060, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – 44ade454a487822f1c9d75aa7d8df907

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 44ade454a487822f1c9d75aa7d8df907SHA1: c0df6b4099072a7ba157f1fb5f5cdaa763501382ANALYSIS DATE: 2022-11-30T17:51:24ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 4f676cdc0e899cfa893c0ed7a97c5ec8

December 2, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4f676cdc0e899cfa893c0ed7a97c5ec8SHA1: c4bc538df849240fa871095415a075373edcdb25ANALYSIS DATE: 2022-11-30T18:03:33ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 025333bf2a8ee8e4430571557ae0f127

December 2, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 025333bf2a8ee8e4430571557ae0f127SHA1: a55122c00da834ed3da8e2e018a8eecf08649ae2ANALYSIS DATE: 2022-11-30T18:06:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – troldesh – 1eb633b23aac213285349962698e72ed

December 2, 2022

Score: 10 MALWARE FAMILY: troldeshTAGS:family:troldesh, discovery, persistence, ransomware, spyware, stealer, trojan, upxMD5: 1eb633b23aac213285349962698e72edSHA1: 304e5ab558fa1d00e00a2c0f43f8f41a385eb784ANALYSIS DATE: 2022-11-30T18:05:44ZTTPS: T1107, T1490, T1012, T1060,...

Malware Analysis – ransomware – 64729c4fc4f6cc830f58317d39bdbfb4

December 2, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 64729c4fc4f6cc830f58317d39bdbfb4SHA1: 81959e7843a93634a4180ff7a0820ceaba93fd51ANALYSIS DATE: 2022-11-30T18:11:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 033516a4e687db49dadc4c3061ef6d36

December 2, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 033516a4e687db49dadc4c3061ef6d36SHA1: 54adf85f70b7ff83573497c11b1d8baa0d3ea3b9ANALYSIS DATE: 2022-11-30T18:09:21ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 47765f90c0fb0320afb71996d787206e

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 47765f90c0fb0320afb71996d787206eSHA1: 8dbc1243d4b0c8cda1d483d7386bc30cb29e5482ANALYSIS DATE: 2022-11-30T18:20:40ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 8c7f25b9f8141962aa93d25ef1362ba3

December 2, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8c7f25b9f8141962aa93d25ef1362ba3SHA1: 89acdc211f721097f1a3c5c00c60a46adea58059ANALYSIS DATE: 2022-11-30T18:28:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 1ae5e991bf1e8e3ff302456851fd64f3

December 2, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 1ae5e991bf1e8e3ff302456851fd64f3SHA1: 64b5d153e138c850b490baec66b6b86ef001f1c9ANALYSIS DATE: 2022-11-30T18:16:06ZTTPS: T1112, T1088, T1089, T1005, T1081, T1060,...

Malware Analysis – wannacry – c780695e67460a79b2f51ff3fe1e2b63

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: c780695e67460a79b2f51ff3fe1e2b63SHA1: 3e6971f31861aa47feba4fdc83a47b2b7a312385ANALYSIS DATE: 2022-11-30T18:16:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – play – 0f8ad126812dc650f26b5739590b8ab8

December 2, 2022

Score: 10 MALWARE FAMILY: playTAGS:family:play, ransomwareMD5: 0f8ad126812dc650f26b5739590b8ab8SHA1: bae22642918dafe12bb7318d7e56c995158f4b63ANALYSIS DATE: 2022-12-02T17:39:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – b276c03b6fd8df69964c5d4e687881d1

December 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: b276c03b6fd8df69964c5d4e687881d1SHA1: 7c4be72dc54658bdb49bec08bcb974510ce2af63ANALYSIS DATE: 2022-12-02T16:24:00ZTTPS: T1060, T1112, T1222, T1082, T1012...

Malware Analysis – smokeloader – 6769f8ded9254765a851e0987753f357

December 2, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6769f8ded9254765a851e0987753f357SHA1: 83f84ee62729844ef206d2cf0d7a18fe20fa5ff9ANALYSIS DATE: 2022-12-02T16:15:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 739cecb018c413e7ced173fc3befb3c5

December 2, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1148, botnet:1881, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 739cecb018c413e7ced173fc3befb3c5SHA1:...

OSINT

Malware Analysis – jigsaw – c2c5848ec8ae11e84d42521c527f75ca

Malware Analysis – wannacry – 44ade454a487822f1c9d75aa7d8df907

Malware Analysis – evasion – 4f676cdc0e899cfa893c0ed7a97c5ec8

Malware Analysis – ransomware – 025333bf2a8ee8e4430571557ae0f127

Malware Analysis – troldesh – 1eb633b23aac213285349962698e72ed

Malware Analysis – ransomware – 64729c4fc4f6cc830f58317d39bdbfb4

Malware Analysis – ransomware – 033516a4e687db49dadc4c3061ef6d36

Malware Analysis – wannacry – 47765f90c0fb0320afb71996d787206e

Malware Analysis – ransomware – 8c7f25b9f8141962aa93d25ef1362ba3

Malware Analysis – evasion – 1ae5e991bf1e8e3ff302456851fd64f3

Malware Analysis – wannacry – c780695e67460a79b2f51ff3fe1e2b63

Malware Analysis – play – 0f8ad126812dc650f26b5739590b8ab8

Malware Analysis – djvu – b276c03b6fd8df69964c5d4e687881d1

Malware Analysis – smokeloader – 6769f8ded9254765a851e0987753f357

Malware Analysis – amadey – 739cecb018c413e7ced173fc3befb3c5

Cuba Ransomware received over $60M in Ransom payments as of August 2022

LockBit 3.0 Ransomware Victim: thorntontomasetti[.]com

LockBit 3.0 Ransomware Victim: st-group[.]com

LockBit 3.0 Ransomware Victim: ckfinc[.]com

LockBit 3.0 Ransomware Victim: menziesaviation[.]com

LockBit 3.0 Ransomware Victim: 8×8[.]com

LockBit 3.0 Ransomware Victim: adamjeeinsurance[.]com

LockBit 3.0 Ransomware Victim: hildinganders[.]com

LockBit 3.0 Ransomware Victim: smithsinterconnect[.]com

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed