OSINT

Malware Analysis – wannacry – 322b3db73cefcaf6a7a7f43277a572ab

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 322b3db73cefcaf6a7a7f43277a572abSHA1: fd271d9a9ec9a5340f085d4b9790ecc915a21175ANALYSIS DATE: 2022-11-30T12:55:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – bee90d14c6577c4a6c4e635fd1887c83

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: bee90d14c6577c4a6c4e635fd1887c83SHA1: 2b0e108ff1ed5037d1b400fedee80c5932c36f35ANALYSIS DATE: 2022-11-30T12:56:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Pywirt – Python Windows Incident Response Toolkit

December 2, 2022

With this application, it is aimed to accelerate the incident response processes by collecting information in windows operating systems via...

Malware Analysis – gandcrab – 01def9f56c9af2d97800d7366551a2f1

December 2, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, ransomware, spyware, stealerMD5: 01def9f56c9af2d97800d7366551a2f1SHA1: 3845b36222249023360100a1b3a6f40dfd165321ANALYSIS DATE: 2022-11-30T13:03:34ZTTPS: T1012, T1082, T1107, T1490, T1491, T1112, T1120,...

Malware Analysis – wannacry – ecc23cb522f9026997a28c38f5c80d41

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: ecc23cb522f9026997a28c38f5c80d41SHA1: 8db667c16f8309062c91bbf753485bd92c13bf9fANALYSIS DATE: 2022-11-30T12:58:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 48873aa5ecae0c477169eacd4f7f120a

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 48873aa5ecae0c477169eacd4f7f120aSHA1: bde076efc39dd693d2c6e26345f8b74259af3362ANALYSIS DATE: 2022-11-30T12:59:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – de29e686d671cdbc56a3cb5c292835d6

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: de29e686d671cdbc56a3cb5c292835d6SHA1: cfa871df1c513580df5a52c1da565157360dd712ANALYSIS DATE: 2022-11-30T13:15:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 862e9e77d04da0117d7527ee86b6735a

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 862e9e77d04da0117d7527ee86b6735aSHA1: 46ed914abda4a189c508c91c997d6d3f45bf3820ANALYSIS DATE: 2022-11-30T13:10:19ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – c1e802d5ee2b507171e2a88103b0a6aa

December 2, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: c1e802d5ee2b507171e2a88103b0a6aaSHA1: 6f221101b2b22001517746fec6e33b3dc3be3cfaANALYSIS DATE: 2022-11-30T13:05:13ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – wannacry – 94834b208a8ccffe6207673c462d1975

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 94834b208a8ccffe6207673c462d1975SHA1: 9beea19d8c2d5466a47c817267abec15508014aaANALYSIS DATE: 2022-11-30T13:09:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – be9bdee97e6142aeb032bda086b983f7

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: be9bdee97e6142aeb032bda086b983f7SHA1: caacfc64688347238751ca28d3ce6a32c764dd7aANALYSIS DATE: 2022-11-30T13:19:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – bde52e2773d0acb422a7a42ef6824bc5

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: bde52e2773d0acb422a7a42ef6824bc5SHA1: d3ec8332484ffca41295dbd7c6347b7b23a67b4eANALYSIS DATE: 2022-11-30T13:22:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 7464da1d0f2a4869f09f4cbb7a1addb9

December 2, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7464da1d0f2a4869f09f4cbb7a1addb9SHA1: e63ca39e3e5efcc91c245edf4b74d7f45c3c17b2ANALYSIS DATE: 2022-11-30T13:16:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – wannacry – 6633a19602561d359e76a67a008d62e8

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 6633a19602561d359e76a67a008d62e8SHA1: d823708efa36c4fc6f8ec99dfa8a9741f0205de4ANALYSIS DATE: 2022-11-30T13:17:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 145c6884b6a10468427e955b1a03b94d

December 2, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 145c6884b6a10468427e955b1a03b94dSHA1: 84dadbb0715a9500e4b30ac4b2ba7426d2aac313ANALYSIS DATE: 2022-11-30T13:26:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – wannacry – f27d3943f18548c0f2d572d63e120493

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: f27d3943f18548c0f2d572d63e120493SHA1: f0c965e91bd85b2b551331011c705eb3cc125186ANALYSIS DATE: 2022-11-30T13:27:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 3e1f1ab7eb22b54d451f764377d869ab

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 3e1f1ab7eb22b54d451f764377d869abSHA1: 0ef805454a7aeb92e5be18457fe430f22186fbc4ANALYSIS DATE: 2022-11-30T13:26:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – b4a0c2ff755856f92f19cb651a61ae80

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: b4a0c2ff755856f92f19cb651a61ae80SHA1: 6937cdafe1e80af4bf90fd0f844e725257b16a08ANALYSIS DATE: 2022-11-30T13:30:17ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Cobalt Stike Beacon Detected – 1[.]14[.]107[.]106:8999

December 2, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 154[.]204[.]28[.]190:443

December 2, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]188[.]65:443

December 2, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – wannacry – 38a3377280ad3182ab1541c841add640

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 38a3377280ad3182ab1541c841add640SHA1: 86b486bbcbeca9d821af505d2c0fde1c3a73ab2eANALYSIS DATE: 2022-11-30T13:38:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – e84c448866510eda6067f0a05ec7fc9f

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: e84c448866510eda6067f0a05ec7fc9fSHA1: cc014fed744e1a0b60433d2560043e29c2bc20ceANALYSIS DATE: 2022-11-30T13:30:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 57037023aa242dd371925bd35e219cbf

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 57037023aa242dd371925bd35e219cbfSHA1: 7635c9f426a7e7edb7882da5b3a617fc7258d82cANALYSIS DATE: 2022-11-30T13:44:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

OSINT

Malware Analysis – wannacry – 322b3db73cefcaf6a7a7f43277a572ab

Malware Analysis – wannacry – bee90d14c6577c4a6c4e635fd1887c83

Pywirt – Python Windows Incident Response Toolkit

Malware Analysis – gandcrab – 01def9f56c9af2d97800d7366551a2f1

Malware Analysis – wannacry – ecc23cb522f9026997a28c38f5c80d41

Malware Analysis – wannacry – 48873aa5ecae0c477169eacd4f7f120a

Malware Analysis – wannacry – de29e686d671cdbc56a3cb5c292835d6

Malware Analysis – wannacry – 862e9e77d04da0117d7527ee86b6735a

Malware Analysis – evasion – c1e802d5ee2b507171e2a88103b0a6aa

Malware Analysis – wannacry – 94834b208a8ccffe6207673c462d1975

Malware Analysis – wannacry – be9bdee97e6142aeb032bda086b983f7

Malware Analysis – wannacry – bde52e2773d0acb422a7a42ef6824bc5

Malware Analysis – evasion – 7464da1d0f2a4869f09f4cbb7a1addb9

Malware Analysis – wannacry – 6633a19602561d359e76a67a008d62e8

Malware Analysis – evasion – 145c6884b6a10468427e955b1a03b94d

Malware Analysis – wannacry – f27d3943f18548c0f2d572d63e120493

Malware Analysis – wannacry – 3e1f1ab7eb22b54d451f764377d869ab

Malware Analysis – wannacry – b4a0c2ff755856f92f19cb651a61ae80

Cobalt Stike Beacon Detected – 1[.]14[.]107[.]106:8999

Cobalt Stike Beacon Detected – 154[.]204[.]28[.]190:443

Cobalt Stike Beacon Detected – 43[.]138[.]188[.]65:443

Malware Analysis – wannacry – 38a3377280ad3182ab1541c841add640

Malware Analysis – wannacry – e84c448866510eda6067f0a05ec7fc9f

Malware Analysis – wannacry – 57037023aa242dd371925bd35e219cbf

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed