OSINT

Malware Analysis – ransomware – 1e3e08ed56fc7913137cfc1b95b68cb6

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 1e3e08ed56fc7913137cfc1b95b68cb6SHA1: 91d56e169d95011769bc4a54dc2f11c4b2115695ANALYSIS DATE: 2022-10-18T22:40:20ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 49d0997396c539711ae1efd04ca5902c

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 49d0997396c539711ae1efd04ca5902cSHA1: 886058fb1c0815c20904da65a468a744123e57d8ANALYSIS DATE: 2022-10-18T22:40:06ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – ransomware – 9dcaa6c847abc868a2d6dead91dd6319

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9dcaa6c847abc868a2d6dead91dd6319SHA1: b62464ed15f9a7d5a82119e301a8bebd5fe47ddcANALYSIS DATE: 2022-10-18T22:40:27ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – e625462dcf0586d7afda19827cb271ca

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e625462dcf0586d7afda19827cb271caSHA1: 28d956d96c44bab58cd982017214232244189debANALYSIS DATE: 2022-10-18T22:40:35ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 121[.]5[.]117[.]173:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]20:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]224[.]42[.]16:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 6d61871e22b3872ad2ac7d21e3a56299

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 6d61871e22b3872ad2ac7d21e3a56299SHA1: 7f0830eb80753d32e8a90a1e0d0d42d0b6866240ANALYSIS DATE: 2022-10-18T22:40:57ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 5e65904195205ca9bedca1ed62c18f0c

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 5e65904195205ca9bedca1ed62c18f0cSHA1: 64d15c171deada754b32fe25812b1c97cc0a0396ANALYSIS DATE: 2022-10-18T22:40:50ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – e8761eb93c7e5989e50da329c4f38aed

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e8761eb93c7e5989e50da329c4f38aedSHA1: 9a2629958472845d2c67757a7cb6aaa445b1a874ANALYSIS DATE: 2022-10-18T22:41:01ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 82[.]156[.]14[.]220:8888

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – e0a1dea78f5ef86ec2d274e7e9bcb5c7

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e0a1dea78f5ef86ec2d274e7e9bcb5c7SHA1: 5f62d188f5eb3038b36007b1b72b20f6b5d24cafANALYSIS DATE: 2022-10-18T22:40:42ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]15:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]14[.]216[.]160:80

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]104[.]157:443

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – wannacry – 8053c8e9171fa8fa75061b6639531671

October 19, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 8053c8e9171fa8fa75061b6639531671SHA1: 25975c73b62751e4defcecb23e1df90627c5360eANALYSIS DATE: 2022-10-18T22:41:12ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 816added67b8695ce1d08dc8d64224f9

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 816added67b8695ce1d08dc8d64224f9SHA1: 500c1d0c0dca3eb8e5a090e942136b140850567eANALYSIS DATE: 2022-10-18T22:54:22ZTTPS: T1012, T1082, T1222, T1053,...

Cobalt Stike Beacon Detected – 39[.]99[.]147[.]117:8088

October 19, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – deba4c78231b0c065ff368ad213a1d4c

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: deba4c78231b0c065ff368ad213a1d4cSHA1: c56bfd5cc3437c381900bcd6b424130bd4454660ANALYSIS DATE: 2022-10-18T22:41:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – adef9b3445ea954ca3ec8a1f61daef01

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, trojanMD5: adef9b3445ea954ca3ec8a1f61daef01SHA1: e4805b0e226fe27413f14679b04aefa5a701ef6fANALYSIS DATE: 2022-10-18T22:42:17ZTTPS: T1082, T1114, T1060, T1112,...

OSINT

Malware Analysis – ransomware – 1e3e08ed56fc7913137cfc1b95b68cb6

Malware Analysis – djvu – 49d0997396c539711ae1efd04ca5902c

Malware Analysis – ransomware – 9dcaa6c847abc868a2d6dead91dd6319

Malware Analysis – ransomware – e625462dcf0586d7afda19827cb271ca

Cobalt Stike Beacon Detected – 121[.]5[.]117[.]173:443

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]20:80

Cobalt Stike Beacon Detected – 23[.]224[.]42[.]16:443

Malware Analysis – ransomware – 6d61871e22b3872ad2ac7d21e3a56299

Malware Analysis – ransomware – 5e65904195205ca9bedca1ed62c18f0c

Malware Analysis – ransomware – e8761eb93c7e5989e50da329c4f38aed

Cobalt Stike Beacon Detected – 82[.]156[.]14[.]220:8888

Malware Analysis – ransomware – e0a1dea78f5ef86ec2d274e7e9bcb5c7

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]15:80

Cobalt Stike Beacon Detected – 106[.]14[.]216[.]160:80

Cobalt Stike Beacon Detected – 43[.]138[.]104[.]157:443

Malware Analysis – wannacry – 8053c8e9171fa8fa75061b6639531671

Malware Analysis – djvu – 816added67b8695ce1d08dc8d64224f9

Cobalt Stike Beacon Detected – 39[.]99[.]147[.]117:8088

Malware Analysis – ransomware – deba4c78231b0c065ff368ad213a1d4c

Malware Analysis – djvu – adef9b3445ea954ca3ec8a1f61daef01

Cobalt Stike Beacon Detected – 45[.]91[.]67[.]44:443

Cobalt Stike Beacon Detected – 47[.]97[.]0[.]61:80

Cobalt Stike Beacon Detected – 43[.]154[.]57[.]146:8001

Brute Ratel C4 Detected – 54[.]178[.]240[.]29:80

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed