OSINT

Malware Analysis – lockbit – ef4a5d286011e8cd66514fa07ac99a29

October 21, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, evasion, persistence, ransomwareMD5: ef4a5d286011e8cd66514fa07ac99a29SHA1: 8458579dd79056cdddbab67f3c82832acd00ab6dANALYSIS DATE: 2022-10-21T15:00:46ZTTPS: T1490, T1059, T1107, T1060, T1112, T1082, T1012, T1120,...

Malware Analysis – discovery – 8c3ce9c090bd9fa2be2375904e042fe4

October 21, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 8c3ce9c090bd9fa2be2375904e042fe4SHA1: 1d14f719e46cd5d76c05ede355e7f11eee2c07c3ANALYSIS DATE: 2022-10-21T15:17:36ZTTPS: T1082, T1060, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – 2d4cbbfab9d173a12d9174130f7bcafb

October 21, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomwareMD5: 2d4cbbfab9d173a12d9174130f7bcafbSHA1: 6b652c8b623f16d1006f7f116f6fc3dad8ea7ea7ANALYSIS DATE: 2022-10-21T15:00:07ZTTPS: T1490, T1059, T1107, T1082, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – b57fa6fca0cff4f7612b9ff9f95c8805

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b57fa6fca0cff4f7612b9ff9f95c8805SHA1: df083f0b4a89dd9964db28685889a7a2c32858beANALYSIS DATE: 2022-10-21T15:36:39ZTTPS: T1005, T1081, T1222, T1012,...

Malware Analysis – persistence – 6f66102d811e4103ccfed34ec1baab4a

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6f66102d811e4103ccfed34ec1baab4aSHA1: f2a6a1e87f8d235eebfd457cab125423082fb49dANALYSIS DATE: 2022-10-21T15:40:23ZTTPS: T1091, T1060, T1112, T1005, T1081, T1082, T1107, T1490...

Malware Analysis – djvu – 07dd31fa45db1cc31252b872abc8c7af

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 07dd31fa45db1cc31252b872abc8c7afSHA1: 9643a41fef4af18b35b53c6671627debd88ec289ANALYSIS DATE: 2022-10-21T15:51:19ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – ransomware – a17412928dcd361f5e5da505949af250

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a17412928dcd361f5e5da505949af250SHA1: 155f2671b5311cde3d946e4b0e5685f1f9f5ea69ANALYSIS DATE: 2022-10-21T15:40:27ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 10eb8999dd0c04774fb0998f80387dc0

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojan, upxMD5: 10eb8999dd0c04774fb0998f80387dc0SHA1: 7e53b412a5ee3a9914be897ff6454c04993c4b36ANALYSIS DATE: 2022-10-21T16:09:34ZTTPS: T1082, T1112, T1031, T1004, T1088, T1089,...

Malware Analysis – xorist – 177068f72d69a4594bc3721fc9c1d6f0

October 21, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 177068f72d69a4594bc3721fc9c1d6f0SHA1: a24fe2857a2386e2413afa1c7476110cfa7319b9ANALYSIS DATE: 2022-10-21T16:09:32ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 49ade3a18ead1ef1a4d92fb85605275c

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 49ade3a18ead1ef1a4d92fb85605275cSHA1: d2d2440959b3609a219508963f647ff4a821be22ANALYSIS DATE: 2022-10-21T16:04:39ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – persistence – d9d9419893fff428ee7efbeb334caa79

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: d9d9419893fff428ee7efbeb334caa79SHA1: b4cd590c102d27a606e0216f7dc55f0dc8793bf9ANALYSIS DATE: 2022-10-21T16:20:38ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – djvu – 456ba4280563e40da987d3402b777dfa

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 456ba4280563e40da987d3402b777dfaSHA1: 0bbdcd4173bfafede77339d638cfb9c74bccf957ANALYSIS DATE: 2022-10-21T16:21:03ZTTPS: T1130, T1112, T1060, T1222,...

Malware Analysis – persistence – a17d57f69b585a9af21e3ad4751b8047

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: a17d57f69b585a9af21e3ad4751b8047SHA1: fb6090d22df4eefd39153b69ab699acee762d5e0ANALYSIS DATE: 2022-10-21T16:20:46ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – 0730e83e8eb11be6f0fbec767a019dce

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 0730e83e8eb11be6f0fbec767a019dceSHA1: a57fed25aed84a8fefb5b0aec9d8aec52d8edb2cANALYSIS DATE: 2022-10-21T16:20:57ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – ransomware – c8bd518dd425e24d3b578ca184d7c90e

October 21, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c8bd518dd425e24d3b578ca184d7c90eSHA1: 0daf5073589b94194042a59b31dd9716a71f86feANALYSIS DATE: 2022-10-21T16:20:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

CISA: Cisco Releases Security Update for Cisco Identity Services Engine

October 21, 2022

Cisco Releases Security Update for Cisco Identity Services Engine Cisco has released a security update to address vulnerabilities affecting Cisco...

Malware Analysis – smokeloader – 63432d6ad5779ea84f3cc02914b27ad1

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 63432d6ad5779ea84f3cc02914b27ad1SHA1: 460c1eea03a2244e91522e55f6ccbcbb1957a98eANALYSIS DATE: 2022-10-21T16:21:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dharma – 1b388741ab70e4898b198d761b876e21

October 21, 2022

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 1b388741ab70e4898b198d761b876e21SHA1: d0d0ddb943c8dfab4377923875b6fec293f424cdANALYSIS DATE: 2022-10-21T16:40:12ZTTPS: T1060, T1112, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – 1e7428a5338a36f3139142eea4cd7501

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1e7428a5338a36f3139142eea4cd7501SHA1: 665b0fee184d48456b10ed478a212f05c41c9e8dANALYSIS DATE: 2022-10-21T16:21:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 6704beef0806f273511c7593433ac6f3

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6704beef0806f273511c7593433ac6f3SHA1: d89e660135ba404bba24c2b8fe41b811f531ab46ANALYSIS DATE: 2022-10-21T16:37:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

CISA adds Linux kernel flaw CVE-2021-3493 to its Known Exploited Vulnerabilities Catalog

October 21, 2022

CISA added a Linux kernel vulnerability, tracked as CVE-2021-3493, to its Known Exploited Vulnerabilities Catalog. The U.S. Cybersecurity and Infrastructure Security...

MHDDoS – DDoS Attack Script With 56 Methods

October 21, 2022

OVH | Bypass OVH RHEX | Random HEX STOMP | Bypass chk_captcha STRESS | Send HTTP Packet With High Byte...

GUAC – A Google Open Source Project to secure software supply chain

October 21, 2022

Google launched the Graph for the Understanding Artifact Composition (GUAC) project, to secure the software supply chain. Google this week launched a...

Malware Analysis – evasion – 4a7c374dad91f035b53c883daa47c962

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4a7c374dad91f035b53c883daa47c962SHA1: 90f086c1cb3ea51cd6812013fb0882627421139cANALYSIS DATE: 2022-10-21T02:17:18ZTTPS: T1060, T1112, T1004, T1082, T1091, T1491, T1088, T1089,...

OSINT

Malware Analysis – lockbit – ef4a5d286011e8cd66514fa07ac99a29

Malware Analysis – discovery – 8c3ce9c090bd9fa2be2375904e042fe4

Malware Analysis – chaos – 2d4cbbfab9d173a12d9174130f7bcafb

Malware Analysis – djvu – b57fa6fca0cff4f7612b9ff9f95c8805

Malware Analysis – persistence – 6f66102d811e4103ccfed34ec1baab4a

Malware Analysis – djvu – 07dd31fa45db1cc31252b872abc8c7af

Malware Analysis – ransomware – a17412928dcd361f5e5da505949af250

Malware Analysis – evasion – 10eb8999dd0c04774fb0998f80387dc0

Malware Analysis – xorist – 177068f72d69a4594bc3721fc9c1d6f0

Malware Analysis – djvu – 49ade3a18ead1ef1a4d92fb85605275c

Malware Analysis – persistence – d9d9419893fff428ee7efbeb334caa79

Malware Analysis – djvu – 456ba4280563e40da987d3402b777dfa

Malware Analysis – persistence – a17d57f69b585a9af21e3ad4751b8047

Malware Analysis – persistence – 0730e83e8eb11be6f0fbec767a019dce

Malware Analysis – ransomware – c8bd518dd425e24d3b578ca184d7c90e

CISA: Cisco Releases Security Update for Cisco Identity Services Engine

Malware Analysis – smokeloader – 63432d6ad5779ea84f3cc02914b27ad1

Malware Analysis – dharma – 1b388741ab70e4898b198d761b876e21

Malware Analysis – smokeloader – 1e7428a5338a36f3139142eea4cd7501

Malware Analysis – evasion – 6704beef0806f273511c7593433ac6f3

CISA adds Linux kernel flaw CVE-2021-3493 to its Known Exploited Vulnerabilities Catalog

MHDDoS – DDoS Attack Script With 56 Methods

GUAC – A Google Open Source Project to secure software supply chain

Malware Analysis – evasion – 4a7c374dad91f035b53c883daa47c962

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed