OSINT

Malware Analysis – persistence – ac700ee3d6fb249686ec5e39f1db966e

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: ac700ee3d6fb249686ec5e39f1db966eSHA1: 72e31b6ab578c6e9c73788ea3451bae06b82ef32ANALYSIS DATE: 2022-10-22T03:20:42ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – persistence – ab58f659f2d6d168c6960904291b9f29

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: ab58f659f2d6d168c6960904291b9f29SHA1: ee32780bf01b97c75a667656918da768fa8d89ecANALYSIS DATE: 2022-10-22T03:22:08ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – persistence – e58f35a9744ef863a648ba8d6cd9f016

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: e58f35a9744ef863a648ba8d6cd9f016SHA1: e82ec0f8db2456ae3a26655bb71444f42ff9f33eANALYSIS DATE: 2022-10-22T03:22:00ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – 1a5463cd36cb6d69914a54395cd367f6

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 1a5463cd36cb6d69914a54395cd367f6SHA1: 6041930b2c2bb26974811d47af8b101773826f7bANALYSIS DATE: 2022-10-22T03:21:52ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – 4105222b7f976596c444f23316c57617

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 4105222b7f976596c444f23316c57617SHA1: 922e2a5587cad70f6202442b9dac64c85fafab3bANALYSIS DATE: 2022-10-22T03:21:41ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – chaos – 257b508bd48ce9bbb447aeb76a69f013

October 22, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 257b508bd48ce9bbb447aeb76a69f013SHA1: c839ec022bf248560dc64ca42499836d1f2bee22ANALYSIS DATE: 2022-10-22T03:40:13ZTTPS: T1490, T1059, T1107, T1060, T1112, T1491,...

Malware Analysis – persistence – 93e43b823190659046c61d99e20c6486

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 93e43b823190659046c61d99e20c6486SHA1: 74c9ffb8bc1492acf3ff36fd3f8f19952af01b6eANALYSIS DATE: 2022-10-22T03:22:24ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – a6f270a986eb430d220f8cd21524c558

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: a6f270a986eb430d220f8cd21524c558SHA1: 14405ef1782d59890b1491ec06b763da2aaf7cd8ANALYSIS DATE: 2022-10-22T03:22:16ZTTPS: T1060, T1112, T1005, T1081, T1082, T1107, T1490, T1091...

Malware Analysis – ransomware – 5ea6d02733264d1f685c6bb009e45794

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5ea6d02733264d1f685c6bb009e45794SHA1: ab18b198dcb941fe1efea2fdd0b2908368218588ANALYSIS DATE: 2022-10-22T03:45:55ZTTPS: T1107, T1490, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – f623aa2147c701b68f8db4e3bb36701c

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f623aa2147c701b68f8db4e3bb36701cSHA1: 0f0d52901b8b662ed5ddea304bc55094c98879a5ANALYSIS DATE: 2022-10-22T03:54:36ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 2e12ce413e915c2a2a55fbff6646f058

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2e12ce413e915c2a2a55fbff6646f058SHA1: 66b782adfa1e70ab5530178ed74333fd8dac1845ANALYSIS DATE: 2022-10-22T03:49:34ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – smokeloader – 7dee1ab63f1a5d740024d881bfd38b54

October 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7dee1ab63f1a5d740024d881bfd38b54SHA1: 54549891251c81086f04ea8cc1ab8e9c7a36ae37ANALYSIS DATE: 2022-10-22T04:16:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – ba5e80f2d798e241471decd7fea5c32e

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ba5e80f2d798e241471decd7fea5c32eSHA1: 0a94f3a096002197befb9dd5e6611f0fba19cf8dANALYSIS DATE: 2022-10-22T03:50:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – a0f2cc9af0d1601244cf49c6921bd654

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a0f2cc9af0d1601244cf49c6921bd654SHA1: 56975fb26d55b42ceaff7b4f259a273be5e7549fANALYSIS DATE: 2022-10-22T04:19:05ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 8118f0eee6a59572daf1d5eb1055644d

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8118f0eee6a59572daf1d5eb1055644dSHA1: 47039fd9e7ee142959fcb90f8b911b8f0c656891ANALYSIS DATE: 2022-10-22T04:16:05ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – – ed7c1e85bb836319b8eb6f7cedafa7d5

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ed7c1e85bb836319b8eb6f7cedafa7d5SHA1: c354add9010891b2e5798cf9ec9703f8c8ae1082ANALYSIS DATE: 2022-10-22T04:19:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – f1c3e4fdca55ff6e6f8597a0a2713fdb

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f1c3e4fdca55ff6e6f8597a0a2713fdbSHA1: 82e40346a7489cf77b90aeb3a4cd287d3363eaf1ANALYSIS DATE: 2022-10-22T04:20:16ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – e15b2ebd158ad84daf45b0853a1bfd3e

October 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e15b2ebd158ad84daf45b0853a1bfd3eSHA1: 82e9555065e8b67ca93b4ae8bf35e717e400a9e3ANALYSIS DATE: 2022-10-22T04:21:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 8ae5a35a6e434514f421e720aecab786

October 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8ae5a35a6e434514f421e720aecab786SHA1: 518ae303c6e50d29ab84765b49e94d9f34862599ANALYSIS DATE: 2022-10-22T04:21:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 5253ee04a417dcde084c02f9922996bc

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5253ee04a417dcde084c02f9922996bcSHA1: 96788615fc0392ac867d7f61e8b8042ed648cd51ANALYSIS DATE: 2022-10-22T04:23:52ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – – 1da30b0ac73ba3217911bd2d7fcccd68

October 22, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: 1da30b0ac73ba3217911bd2d7fcccd68SHA1: bbf2eb07e50925e798d8397add96740df0dbbe48ANALYSIS DATE: 2022-10-22T04:24:59ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – a4743f759b43493ff32ce5f70b45946d

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a4743f759b43493ff32ce5f70b45946dSHA1: e89f2f7f7e226a869a60bec822db5cafb26d36dbANALYSIS DATE: 2022-10-22T04:33:03ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – – ced879efa3f8ed1c2ff2952c6bc7225e

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ced879efa3f8ed1c2ff2952c6bc7225eSHA1: 8286ca8d0c4a54a15aa194ec78fde219bf4c4149ANALYSIS DATE: 2022-10-22T04:45:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 7b1414db846dddafb2de8405425b57fd

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 7b1414db846dddafb2de8405425b57fdSHA1: e9220f99b4c33d253221ecf54b58af3a0573054aANALYSIS DATE: 2022-10-22T04:32:48ZTTPS:...

OSINT

Malware Analysis – persistence – ac700ee3d6fb249686ec5e39f1db966e

Malware Analysis – persistence – ab58f659f2d6d168c6960904291b9f29

Malware Analysis – persistence – e58f35a9744ef863a648ba8d6cd9f016

Malware Analysis – persistence – 1a5463cd36cb6d69914a54395cd367f6

Malware Analysis – persistence – 4105222b7f976596c444f23316c57617

Malware Analysis – chaos – 257b508bd48ce9bbb447aeb76a69f013

Malware Analysis – persistence – 93e43b823190659046c61d99e20c6486

Malware Analysis – persistence – a6f270a986eb430d220f8cd21524c558

Malware Analysis – ransomware – 5ea6d02733264d1f685c6bb009e45794

Malware Analysis – ransomware – f623aa2147c701b68f8db4e3bb36701c

Malware Analysis – djvu – 2e12ce413e915c2a2a55fbff6646f058

Malware Analysis – smokeloader – 7dee1ab63f1a5d740024d881bfd38b54

Malware Analysis – – ba5e80f2d798e241471decd7fea5c32e

Malware Analysis – ransomware – a0f2cc9af0d1601244cf49c6921bd654

Malware Analysis – djvu – 8118f0eee6a59572daf1d5eb1055644d

Malware Analysis – – ed7c1e85bb836319b8eb6f7cedafa7d5

Malware Analysis – ransomware – f1c3e4fdca55ff6e6f8597a0a2713fdb

Malware Analysis – smokeloader – e15b2ebd158ad84daf45b0853a1bfd3e

Malware Analysis – smokeloader – 8ae5a35a6e434514f421e720aecab786

Malware Analysis – ransomware – 5253ee04a417dcde084c02f9922996bc

Malware Analysis – – 1da30b0ac73ba3217911bd2d7fcccd68

Malware Analysis – ransomware – a4743f759b43493ff32ce5f70b45946d

Malware Analysis – – ced879efa3f8ed1c2ff2952c6bc7225e

Malware Analysis – djvu – 7b1414db846dddafb2de8405425b57fd

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed