OSINT

Malware Analysis – ransomware – d9956991845e1e275e0fc823133eebf2

October 30, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d9956991845e1e275e0fc823133eebf2SHA1: d5c9a236ea6a8af8af49f1b95d9065d5d31be737ANALYSIS DATE: 2022-10-30T15:40:47ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 30c121c3995d7d7c5597b0b4d3047aa2

October 30, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 30c121c3995d7d7c5597b0b4d3047aa2SHA1: 4c80abe95de3788a5ff6b2e16175a68b76413643ANALYSIS DATE: 2022-10-30T15:40:33ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 73daf946d8e6ca26d983209add90d970

October 30, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 73daf946d8e6ca26d983209add90d970SHA1: 4490a66af0cd16b30c6e189e44b5c900cc822fb4ANALYSIS DATE: 2022-10-30T16:09:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – c862bbb79cf3512d444dec4acb489882

October 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:google2, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – ransomware – 1bd2517f25e7ba3a3b9568c2768b66d9

October 30, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1bd2517f25e7ba3a3b9568c2768b66d9SHA1: a7cd993dd6b820b4c8f4fd9973a29e1f779c5ac1ANALYSIS DATE: 2022-10-30T16:16:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – c7b987a36262b72c27d1e3282186f235

October 30, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c7b987a36262b72c27d1e3282186f235SHA1: f6722992a55c8d7ab60986725b0d07204b14c4a3ANALYSIS DATE: 2022-10-30T17:36:38ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

OSINT

Malware Analysis – ransomware – d9956991845e1e275e0fc823133eebf2

Malware Analysis – ransomware – 30c121c3995d7d7c5597b0b4d3047aa2

Malware Analysis – ransomware – 73daf946d8e6ca26d983209add90d970

Malware Analysis – djvu – c862bbb79cf3512d444dec4acb489882

Malware Analysis – ransomware – 1bd2517f25e7ba3a3b9568c2768b66d9

Malware Analysis – smokeloader – c7b987a36262b72c27d1e3282186f235

BlackByte ransomware group hit Japanese beverage giant Asahi

Air New Zealand warns of an ongoing credential stuffing attack

Security Affairs newsletter Round 391

Ermir – An Evil Java RMI Registry

Cobalt Stike Beacon Detected – 152[.]89[.]196[.]231:8080

Cobalt Stike Beacon Detected – 124[.]221[.]244[.]47:2222

Cobalt Stike Beacon Detected – 107[.]148[.]236[.]164:80

Cobalt Stike Beacon Detected – 119[.]45[.]123[.]7:443

Cobalt Stike Beacon Detected – 43[.]138[.]155[.]198:8090

Cobalt Stike Beacon Detected – 47[.]243[.]236[.]239:80

Cobalt Stike Beacon Detected – 119[.]23[.]61[.]52:8099

Cobalt Stike Beacon Detected – 82[.]157[.]144[.]204:81

Cobalt Stike Beacon Detected – 107[.]189[.]8[.]145:9099

Cobalt Stike Beacon Detected – 103[.]150[.]173[.]221:443

Cobalt Stike Beacon Detected – 43[.]138[.]164[.]147:11112

Cobalt Stike Beacon Detected – 38[.]6[.]155[.]188:80

Cobalt Stike Beacon Detected – 81[.]19[.]140[.]23:443

Cobalt Stike Beacon Detected – 47[.]104[.]139[.]149:80

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed