OSINT

Malware Analysis – gandcrab – de4b345a676da185d23cd5801d0b0c17

November 30, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: de4b345a676da185d23cd5801d0b0c17SHA1: 9d554532cf28d1496f55ed4f8f0cd24a380608c6ANALYSIS DATE: 2022-11-30T09:20:10ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – gandcrab – 487c1db909a7e7505881aa7c3ee15202

November 30, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 487c1db909a7e7505881aa7c3ee15202SHA1: 9e28ab1ed6f5a52abde85350723a511e2a358a27ANALYSIS DATE: 2022-11-30T09:20:10ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – gandcrab – 9d641bf0c9da19bef4da566bf6dc6a62

November 30, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 9d641bf0c9da19bef4da566bf6dc6a62SHA1: 27ec26d39481cca74e184a9dd9c0b5fb35f73631ANALYSIS DATE: 2022-11-30T09:20:12ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – gandcrab – 5f2e48de5668bc86caec678c0f3c3d8e

November 30, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 5f2e48de5668bc86caec678c0f3c3d8eSHA1: 30a295a6b157b35fed7187ef68319397be36a3a8ANALYSIS DATE: 2022-11-30T09:21:04ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – demonware – 25af3ae9f4ebe5413b0ca1080b69b0ca

November 30, 2022

Score: 10 MALWARE FAMILY: demonwareTAGS:family:demonware, ransomwareMD5: 25af3ae9f4ebe5413b0ca1080b69b0caSHA1: c34e2a2d8ba0aaea3913227de0cbf87cad4ebd1bANALYSIS DATE: 2022-11-30T09:20:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – gandcrab – 17093a2ba053dc45365e87adaf740f0e

November 30, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 17093a2ba053dc45365e87adaf740f0eSHA1: 36dcbba1f05ae2bc302ae82c5b85acbb6d0c7fcdANALYSIS DATE: 2022-11-30T09:21:05ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – gandcrab – 843ea67c5475156ded41acd56e0bdd10

November 30, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 843ea67c5475156ded41acd56e0bdd10SHA1: 48dabd57bf3f702ed79a550aaf34d4de719945fbANALYSIS DATE: 2022-11-30T09:22:12ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – gandcrab – 85dcd4717b25b5f44acffe9c9f5ed284

November 30, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 85dcd4717b25b5f44acffe9c9f5ed284SHA1: 43f70d92c1b57cacd33487b122377485f82e1f36ANALYSIS DATE: 2022-11-30T09:22:12ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – gandcrab – 75f60a672255929f464c82ce3555adb0

November 30, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 75f60a672255929f464c82ce3555adb0SHA1: 44b0a3b0fe5575f7f66bef40e9a78f9a77638a69ANALYSIS DATE: 2022-11-30T09:22:12ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – gandcrab – c611797a3ba74487a39b492016c37ed4

November 30, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: c611797a3ba74487a39b492016c37ed4SHA1: 75a17d005c2229cf5440c918d28cd67d9b811602ANALYSIS DATE: 2022-11-30T09:28:12ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA malware...

China-linked UNC4191 APT relies on USB Devices in attacks against entities in the Philippines

November 30, 2022

An alleged China-linked cyberespionage group, tracked as UNC4191, used USB devices in attacks aimed at Philippines entities. Mandiant researchers spotted...

Malware Analysis – gandcrab – 7932d85c43827f357cb376a8cdfac792

November 30, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 7932d85c43827f357cb376a8cdfac792SHA1: 90ea946d54e51946d72bad893fea31c750e89ef9ANALYSIS DATE: 2022-11-30T09:29:04ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – gandcrab – 92f2c741b8f6a12178dbaa45c26cf61c

November 30, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 92f2c741b8f6a12178dbaa45c26cf61cSHA1: 089fba87301a7717dfc05d7457395c556d8e49dcANALYSIS DATE: 2022-11-30T09:29:04ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 03ef7270d445163f6cc4771f6ecb54e9

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 03ef7270d445163f6cc4771f6ecb54e9SHA1: 598e7905bd91013f6efa5975a7903de096d115e5ANALYSIS DATE: 2022-11-30T10:32:18ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – amadey – 25fab8af68b52603ff3586578d7461f4

November 30, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1148, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, upxMD5: 25fab8af68b52603ff3586578d7461f4SHA1:...

Malware Analysis – – 420b0efca9566472852eeb97c9e48251

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 420b0efca9566472852eeb97c9e48251SHA1: df96672a220e6d3500f5f181bce95d3d0c4967e2ANALYSIS DATE: 2022-11-30T10:39:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 91f646afe3576c01b06defbb57d76dff

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 91f646afe3576c01b06defbb57d76dffSHA1: 8103830642df7b199e0700cbab535bd1c3fd0a6bANALYSIS DATE: 2022-11-30T10:38:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 0509def2e4e347a619de107fd627c8ea

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 0509def2e4e347a619de107fd627c8eaSHA1: 4fff536f2ab96a75198058454072213cc3b4cf60ANALYSIS DATE: 2022-11-30T10:39:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 97ca6aca8e4b107f0903dfddd60aad2b

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 97ca6aca8e4b107f0903dfddd60aad2bSHA1: 69b16da54518a7d6ba35d6a04c21fbe3547ae6b5ANALYSIS DATE: 2022-11-30T10:38:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 695da29328c54cb54bdcd17b80ee11dd

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 695da29328c54cb54bdcd17b80ee11ddSHA1: 6d303b75bad9678ba8454c4fbe252b58d5c40f49ANALYSIS DATE: 2022-11-30T10:40:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – dcrat – 28faf3fac05092a2b4b2fcfc4ea91180

November 30, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 28faf3fac05092a2b4b2fcfc4ea91180SHA1:...

Malware Analysis – – 769c41f8846f5b70f565df16c026c802

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 769c41f8846f5b70f565df16c026c802SHA1: e5966bdd89f1c015be16bbd2ef179719ee57eed6ANALYSIS DATE: 2022-11-30T10:51:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 608de8e2c3aa028c739a769b57b4f48e

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 608de8e2c3aa028c739a769b57b4f48eSHA1: abdce09ba982dafb15b93d75e8698d6e50276eacANALYSIS DATE: 2022-11-30T10:40:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 2328b5d07c3e5f347c9303933cf1d98a

November 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 2328b5d07c3e5f347c9303933cf1d98aSHA1: a4c1a4051b15eca8d9ff81ff4a7b24e45bdaa0f8ANALYSIS DATE: 2022-11-30T10:53:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

OSINT

Malware Analysis – gandcrab – de4b345a676da185d23cd5801d0b0c17

Malware Analysis – gandcrab – 487c1db909a7e7505881aa7c3ee15202

Malware Analysis – gandcrab – 9d641bf0c9da19bef4da566bf6dc6a62

Malware Analysis – gandcrab – 5f2e48de5668bc86caec678c0f3c3d8e

Malware Analysis – demonware – 25af3ae9f4ebe5413b0ca1080b69b0ca

Malware Analysis – gandcrab – 17093a2ba053dc45365e87adaf740f0e

Malware Analysis – gandcrab – 843ea67c5475156ded41acd56e0bdd10

Malware Analysis – gandcrab – 85dcd4717b25b5f44acffe9c9f5ed284

Malware Analysis – gandcrab – 75f60a672255929f464c82ce3555adb0

Malware Analysis – gandcrab – c611797a3ba74487a39b492016c37ed4

China-linked UNC4191 APT relies on USB Devices in attacks against entities in the Philippines

Malware Analysis – gandcrab – 7932d85c43827f357cb376a8cdfac792

Malware Analysis – gandcrab – 92f2c741b8f6a12178dbaa45c26cf61c

Malware Analysis – djvu – 03ef7270d445163f6cc4771f6ecb54e9

Malware Analysis – amadey – 25fab8af68b52603ff3586578d7461f4

Malware Analysis – – 420b0efca9566472852eeb97c9e48251

Malware Analysis – – 91f646afe3576c01b06defbb57d76dff

Malware Analysis – – 0509def2e4e347a619de107fd627c8ea

Malware Analysis – – 97ca6aca8e4b107f0903dfddd60aad2b

Malware Analysis – – 695da29328c54cb54bdcd17b80ee11dd

Malware Analysis – dcrat – 28faf3fac05092a2b4b2fcfc4ea91180

Malware Analysis – – 769c41f8846f5b70f565df16c026c802

Malware Analysis – – 608de8e2c3aa028c739a769b57b4f48e

Malware Analysis – – 2328b5d07c3e5f347c9303933cf1d98a

[NIGHTSPIRE] – Ransomware Victim: Enem Nostrum Remedies Pvt[.] Ltd

[THEGENTLEMEN] – Ransomware Victim: St Stephen’s International

[QILIN] – Ransomware Victim: Mango’s Tropical Cafe

Cobalt Strike Beacon Detected – 121[.]41[.]167[.]80:80

Cobalt Strike Beacon Detected – 38[.]190[.]224[.]63:80

You may have missed