OSINT

Malware Analysis – discovery – 10ee7cce9524e4d2720a32f8fea16010

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 10ee7cce9524e4d2720a32f8fea16010SHA1: d7e89b4db2324da4dec5d020946c2eb92484f4baANALYSIS DATE: 2022-10-21T17:47:15ZTTPS: T1222, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 27bbd42246a1822d33d2483c915cd660

October 23, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 27bbd42246a1822d33d2483c915cd660SHA1: f4e1809dfd77ee7e5867de325f7ae3c334f4a394ANALYSIS DATE: 2022-10-21T18:26:21ZTTPS: T1082, T1060, T1112, T1004, T1158, T1088,...

Cobalt Stike Beacon Detected – 194[.]195[.]213[.]31:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]248:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]243:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 42c6a6b16d75378eab14240084ae16f0

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 42c6a6b16d75378eab14240084ae16f0SHA1: 83031b984c12a0cb50d7882a450fe3fa85adc16fANALYSIS DATE: 2022-10-21T18:43:48ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 166a8cec83c5e620cfe57290754a14b6

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 166a8cec83c5e620cfe57290754a14b6SHA1: 302ad1ed3a3518db09a36e0093b9cd188d819874ANALYSIS DATE: 2022-10-21T19:07:27ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 27c0ae51af391cf5d411e6aa790a7660

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 27c0ae51af391cf5d411e6aa790a7660SHA1: 07c2bdca3cebcb1725a76260a151f986ae3b5bb8ANALYSIS DATE: 2022-10-21T18:54:28ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – cryptolocker – 5a4add9136f4bab32c9576ea03133c3e

October 23, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: 5a4add9136f4bab32c9576ea03133c3eSHA1: c72534ef23599b2801da50e2e7e5206c8c57ab1eANALYSIS DATE: 2022-10-21T18:47:47ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 8[.]142[.]11[.]169:8888

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 54[.]64[.]32[.]174:8080

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 143[.]198[.]154[.]179:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]1[.]215[.]252:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – 793c23884b769e0561ac51e543d20cf0

October 23, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 793c23884b769e0561ac51e543d20cf0SHA1: e4aa8deef807ded18edc553aabfedb33a8cdf483ANALYSIS DATE: 2022-10-21T19:24:25ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 62cf2c0bbbbd750f10f2ceada62cba80

October 23, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 62cf2c0bbbbd750f10f2ceada62cba80SHA1: 6c52bfdf172a1762fbf003e346ade681b46b702dANALYSIS DATE: 2022-10-21T19:24:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 7652b0483d37bd356614b3888ab37dc0

October 23, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7652b0483d37bd356614b3888ab37dc0SHA1: e582f54d1ba4baeadc11c1e0d92f1cf4ff3239feANALYSIS DATE: 2022-10-21T19:24:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 7c76a982bb6b0733ebd8ac0b8c3229e0

October 23, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7c76a982bb6b0733ebd8ac0b8c3229e0SHA1: 2709aa4c2e05fc106c31289caae76b04882b2c19ANALYSIS DATE: 2022-10-21T19:24:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 172[.]105[.]14[.]22:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]66[.]151[.]195:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]101[.]35[.]71:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]244[.]73[.]220:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – f3d0f216082efa741c8bfd2d48f44f93

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f3d0f216082efa741c8bfd2d48f44f93SHA1: aa95deb15b0010136901bf38cd75db7956b6a762ANALYSIS DATE: 2022-10-22T20:16:28ZTTPS: T1082, T1053, T1012, T1060,...

Malware Analysis – – 9d90ec66bb19ef146bab226bea33179f

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 9d90ec66bb19ef146bab226bea33179fSHA1: be8e6a3c530379d93bd4da368ef63feed975eeebANALYSIS DATE: 2022-10-21T19:25:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 9b9990715e97a109dcf3ca50c261117c

October 23, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 9b9990715e97a109dcf3ca50c261117cSHA1: 0015726a1a50e9925145eaf1e3b07961245b4dd1ANALYSIS DATE: 2022-10-22T21:00:19ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

OSINT

Malware Analysis – discovery – 10ee7cce9524e4d2720a32f8fea16010

Malware Analysis – evasion – 27bbd42246a1822d33d2483c915cd660

Cobalt Stike Beacon Detected – 194[.]195[.]213[.]31:80

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]248:80

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]243:443

Malware Analysis – ransomware – 42c6a6b16d75378eab14240084ae16f0

Malware Analysis – discovery – 166a8cec83c5e620cfe57290754a14b6

Malware Analysis – discovery – 27c0ae51af391cf5d411e6aa790a7660

Malware Analysis – cryptolocker – 5a4add9136f4bab32c9576ea03133c3e

Cobalt Stike Beacon Detected – 8[.]142[.]11[.]169:8888

Cobalt Stike Beacon Detected – 54[.]64[.]32[.]174:8080

Cobalt Stike Beacon Detected – 143[.]198[.]154[.]179:80

Cobalt Stike Beacon Detected – 37[.]1[.]215[.]252:443

Malware Analysis – evasion – 793c23884b769e0561ac51e543d20cf0

Malware Analysis – ransomware – 62cf2c0bbbbd750f10f2ceada62cba80

Malware Analysis – evasion – 7652b0483d37bd356614b3888ab37dc0

Malware Analysis – evasion – 7c76a982bb6b0733ebd8ac0b8c3229e0

Cobalt Stike Beacon Detected – 172[.]105[.]14[.]22:80

Cobalt Stike Beacon Detected – 45[.]66[.]151[.]195:443

Cobalt Stike Beacon Detected – 20[.]101[.]35[.]71:443

Cobalt Stike Beacon Detected – 104[.]244[.]73[.]220:443

Malware Analysis – djvu – f3d0f216082efa741c8bfd2d48f44f93

Malware Analysis – – 9d90ec66bb19ef146bab226bea33179f

Malware Analysis – persistence – 9b9990715e97a109dcf3ca50c261117c

[INTERLOCK] – Ransomware Victim: City of Peabody, MA

[SAFEPAY] – Ransomware Victim: norpak[.]com

[INTERLOCK] – Ransomware Victim: CB Quality Machining & Engineering

[INTERLOCK] – Ransomware Victim: Anderson & Karrenberg

CVE Alert: CVE-2025-7472

You may have missed