OSINT

Malware Analysis – ransomware – 47a4be9f3efb164ba1e5d2ff2eabb74b

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 47a4be9f3efb164ba1e5d2ff2eabb74bSHA1: a85ce91292ab43b7e683f95cc2028f35d1cc86e1ANALYSIS DATE: 2022-10-14T22:12:08ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 580967464f817cbc58c3509c5df320e0

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 580967464f817cbc58c3509c5df320e0SHA1: 245cc7171d3adc098dea588f8f64a57ad6c72ebfANALYSIS DATE: 2022-10-14T22:27:13ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 544dddaf50ca3f238f5aba58f5c13f17

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 544dddaf50ca3f238f5aba58f5c13f17SHA1: b82cba6a89fa17f6812466f73f91bcb194808e3fANALYSIS DATE: 2022-10-14T22:24:12ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 147[.]182[.]237[.]165:80

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]77:4443

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 89[.]208[.]105[.]2:443

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]3:443

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 5e2e7b3f7863f8911ce2a06fab3036cc

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 5e2e7b3f7863f8911ce2a06fab3036ccSHA1: 36b1e25567903f38043f351c714773c36989a632ANALYSIS DATE: 2022-10-14T22:30:21ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 76fa3773e54388154a9d68a74d7dd707

October 15, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 76fa3773e54388154a9d68a74d7dd707SHA1: 99b3d72a040422069ee3812bbacdf31b926d3132ANALYSIS DATE: 2022-10-14T22:51:22ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 628c75f61ea69dddf4701be60aa7ec4a

October 15, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 628c75f61ea69dddf4701be60aa7ec4aSHA1: 2cb7ee2d3e875159573d16db3ce69d2aa616cc0eANALYSIS DATE: 2022-10-14T22:33:16ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 7c216cf238bfdc997e0b633fcdb92e48

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7c216cf238bfdc997e0b633fcdb92e48SHA1: 260c4eca900577511c5c938465fd21b42e390361ANALYSIS DATE: 2022-10-14T22:54:25ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 159[.]223[.]16[.]152:443

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 123[.]57[.]57[.]203:443

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 114[.]115[.]208[.]101:8080

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]221[.]35[.]184:443

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

LockBit 3.0 Ransomware Victim: kilvington[.]vic[.]edu[.]au

October 14, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: bankruptcypa[.]com

October 14, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: tamhash[.]co[.]il

October 14, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: mk[.]co[.]th

October 14, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: heronconstruction[.]co[.]nz

October 14, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: villajuris[.]be

October 14, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – evasion – 633b2a5446277c64af88e9c293876660

October 14, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojan, upxMD5: 633b2a5446277c64af88e9c293876660SHA1: 4906107d6e455907f6e13c4c2c5c9b56a5e99a19ANALYSIS DATE: 2022-10-14T08:06:57ZTTPS: T1060, T1112, T1082, T1088, T1089, T1031,...

Malware Analysis – evasion – 6e2ca3e61b8255f3195fc6202e686f50

October 14, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 6e2ca3e61b8255f3195fc6202e686f50SHA1: ca28065ce0774e9514e592dae71ac66638d5a613ANALYSIS DATE: 2022-10-14T07:57:00ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – bbb64fd6d0f91adf49a33770408c7957

October 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: bbb64fd6d0f91adf49a33770408c7957SHA1: 8ff255508dbb0030d3f1a319f292b79fbc04596eANALYSIS DATE: 2022-10-14T14:00:31ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

OSINT

Malware Analysis – ransomware – 47a4be9f3efb164ba1e5d2ff2eabb74b

Malware Analysis – ransomware – 580967464f817cbc58c3509c5df320e0

Malware Analysis – ransomware – 544dddaf50ca3f238f5aba58f5c13f17

Cobalt Stike Beacon Detected – 147[.]182[.]237[.]165:80

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]77:4443

Cobalt Stike Beacon Detected – 89[.]208[.]105[.]2:443

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]3:443

Malware Analysis – ransomware – 5e2e7b3f7863f8911ce2a06fab3036cc

Malware Analysis – smokeloader – 76fa3773e54388154a9d68a74d7dd707

Malware Analysis – smokeloader – 628c75f61ea69dddf4701be60aa7ec4a

Malware Analysis – ransomware – 7c216cf238bfdc997e0b633fcdb92e48

Cobalt Stike Beacon Detected – 159[.]223[.]16[.]152:443

Cobalt Stike Beacon Detected – 123[.]57[.]57[.]203:443

Cobalt Stike Beacon Detected – 114[.]115[.]208[.]101:8080

Cobalt Stike Beacon Detected – 124[.]221[.]35[.]184:443

LockBit 3.0 Ransomware Victim: kilvington[.]vic[.]edu[.]au

LockBit 3.0 Ransomware Victim: bankruptcypa[.]com

LockBit 3.0 Ransomware Victim: tamhash[.]co[.]il

LockBit 3.0 Ransomware Victim: mk[.]co[.]th

LockBit 3.0 Ransomware Victim: heronconstruction[.]co[.]nz

LockBit 3.0 Ransomware Victim: villajuris[.]be

Malware Analysis – evasion – 633b2a5446277c64af88e9c293876660

Malware Analysis – evasion – 6e2ca3e61b8255f3195fc6202e686f50

Malware Analysis – wannacry – bbb64fd6d0f91adf49a33770408c7957

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed