OSINT

Malware Analysis – wannacry – fc937204786d703513cf68413713f818

October 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: fc937204786d703513cf68413713f818SHA1: 747c09c318f7553da8aaafa08ba17ffc7e9ef383ANALYSIS DATE: 2022-10-14T14:00:21ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – d3c4e2a02c9ded58943f2d9b87c7e88a

October 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: d3c4e2a02c9ded58943f2d9b87c7e88aSHA1: f5f2192a0725423083ce96d6810ac2a81ea5e940ANALYSIS DATE: 2022-10-14T14:00:44ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – discovery – 73efb6d5e1bd353f728913cdd72c14a0

October 14, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 73efb6d5e1bd353f728913cdd72c14a0SHA1: a4be1e799a7fb79086f6c8dedbfe6176123a5366ANALYSIS DATE: 2022-10-14T09:18:19ZTTPS: T1158, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – medusalocker – a65e340a616178bceb72e056554ca8d6

October 14, 2022

Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, evasion, ransomware, spyware, stealer, trojanMD5: a65e340a616178bceb72e056554ca8d6SHA1: 00f95a3e9e1ce53e4476c770e61f08c110d3beaeANALYSIS DATE: 2022-10-14T14:20:05ZTTPS: T1012, T1120, T1082, T1088, T1089, T1112,...

Malware Analysis – wannacry – 9d5fa49800174fcd9481b27d9a547fb9

October 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 9d5fa49800174fcd9481b27d9a547fb9SHA1: 175bb36c74eee2656e40180278290c91360e5915ANALYSIS DATE: 2022-10-14T14:00:49ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – b3387f11fa7bc1251086e8907a8991f3

October 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: b3387f11fa7bc1251086e8907a8991f3SHA1: c7708c19abbbd9712fd2f228f2aacc71527b3911ANALYSIS DATE: 2022-10-14T14:01:07ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 268825329e04592f5f591be46a52dd53

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 268825329e04592f5f591be46a52dd53SHA1: c36396324df077b6e3f8eab90bed632857f9b7ccANALYSIS DATE: 2022-10-14T14:13:53ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – wannacry – c3ffd73826c8c31546f1d90b7dcb7f70

October 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: c3ffd73826c8c31546f1d90b7dcb7f70SHA1: 2924214e4467599dc00ef7f9d7cf10ac2c0c76c6ANALYSIS DATE: 2022-10-14T14:20:56ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 63213dd705a9cfdec2b9a46abe534a9b

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 63213dd705a9cfdec2b9a46abe534a9bSHA1: 879916d680a2e8f5b11157f2472edb167f3b677fANALYSIS DATE: 2022-10-14T14:20:11ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – d7469660e9ad438485bd924a6cebce85

October 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: d7469660e9ad438485bd924a6cebce85SHA1: f3144c0bd1251cb9a6f66342cb6cfd5a1560232bANALYSIS DATE: 2022-10-14T14:20:45ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 237fd4e4ba932c9255c16c030d712f5d

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 237fd4e4ba932c9255c16c030d712f5dSHA1: 1d84e276f7c1bb55224cef42cd414d848b779002ANALYSIS DATE: 2022-10-14T14:20:21ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – aaee141f3e0aa3f7c9c376f262b97b29

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: aaee141f3e0aa3f7c9c376f262b97b29SHA1: be78f4517d29c1117e3143a6687d8e8fbe84283dANALYSIS DATE: 2022-10-14T15:20:17ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – danabot – 8d1c8f19e9b43d1b413985f412ae00a6

October 14, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – djvu – 2055a04e632d1e5588b245b7cc8a52ac

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2055a04e632d1e5588b245b7cc8a52acSHA1: 9f458f97c995c6a38e179be9d0cd3e6726a48543ANALYSIS DATE: 2022-10-14T15:01:12ZTTPS: T1053, T1012, T1082, T1005,...

Malware Analysis – – 653ee122709e45a162a2e9805d446a2e

October 14, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 653ee122709e45a162a2e9805d446a2eSHA1: 2f16d9e14c79d7e15fcb7204fceda2ce163802ecANALYSIS DATE: 2022-10-14T14:50:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 7b6d799c95a79ddfbc88cf22c6a40807

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7b6d799c95a79ddfbc88cf22c6a40807SHA1: a27e5ee122199eddccc6b0b2dc49de9a14e8d6c3ANALYSIS DATE: 2022-10-14T15:40:21ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – danabot – a02834d5e9f234a27480e7bc13a5ee95

October 14, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:vidar, botnet:517, banker, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5:...

Malware Analysis – ransomware – 86a6d2a60a39ead1e09ad35512710f80

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 86a6d2a60a39ead1e09ad35512710f80SHA1: 35b44dcaf8c7f291a5823d609aec557593f2d752ANALYSIS DATE: 2022-10-14T15:40:11ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 61b3785a83a8f28a1beddfbb41ef1059

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 61b3785a83a8f28a1beddfbb41ef1059SHA1: 66e1801238581a6d183a5c2b34159c5c9e6065bfANALYSIS DATE: 2022-10-14T15:38:19ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – b70ec686260b1821f07b44ed88dcd4e0

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b70ec686260b1821f07b44ed88dcd4e0SHA1: 9e3290d79406c87f905263a45eebfca4f8a6e7dbANALYSIS DATE: 2022-10-14T15:40:41ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4f2d1e4655d12d45efc26b1034034f9b

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4f2d1e4655d12d45efc26b1034034f9bSHA1: b2e1b3fef5c75a44902b984e2e7c8d9e143fc4a9ANALYSIS DATE: 2022-10-14T15:40:34ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9ce251bd921f81553ada59816d764cde

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9ce251bd921f81553ada59816d764cdeSHA1: 43d4199349762939428ad422dfd6eac420517f22ANALYSIS DATE: 2022-10-14T15:40:51ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4ebe2c03a302bcf4dee5d444101ee2d1

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4ebe2c03a302bcf4dee5d444101ee2d1SHA1: e84606b85239c8bc1580f60ed58f5e2706c52dafANALYSIS DATE: 2022-10-14T15:40:57ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 52ffaf10efe8795445a3df86abd0ded2

October 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 52ffaf10efe8795445a3df86abd0ded2SHA1: c1daa480214146034e1bdb20286196246b7a7428ANALYSIS DATE: 2022-10-14T16:38:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

OSINT

Malware Analysis – wannacry – fc937204786d703513cf68413713f818

Malware Analysis – wannacry – d3c4e2a02c9ded58943f2d9b87c7e88a

Malware Analysis – discovery – 73efb6d5e1bd353f728913cdd72c14a0

Malware Analysis – medusalocker – a65e340a616178bceb72e056554ca8d6

Malware Analysis – wannacry – 9d5fa49800174fcd9481b27d9a547fb9

Malware Analysis – wannacry – b3387f11fa7bc1251086e8907a8991f3

Malware Analysis – djvu – 268825329e04592f5f591be46a52dd53

Malware Analysis – wannacry – c3ffd73826c8c31546f1d90b7dcb7f70

Malware Analysis – ransomware – 63213dd705a9cfdec2b9a46abe534a9b

Malware Analysis – wannacry – d7469660e9ad438485bd924a6cebce85

Malware Analysis – ransomware – 237fd4e4ba932c9255c16c030d712f5d

Malware Analysis – djvu – aaee141f3e0aa3f7c9c376f262b97b29

Malware Analysis – danabot – 8d1c8f19e9b43d1b413985f412ae00a6

Malware Analysis – djvu – 2055a04e632d1e5588b245b7cc8a52ac

Malware Analysis – – 653ee122709e45a162a2e9805d446a2e

Malware Analysis – ransomware – 7b6d799c95a79ddfbc88cf22c6a40807

Malware Analysis – danabot – a02834d5e9f234a27480e7bc13a5ee95

Malware Analysis – ransomware – 86a6d2a60a39ead1e09ad35512710f80

Malware Analysis – djvu – 61b3785a83a8f28a1beddfbb41ef1059

Malware Analysis – ransomware – b70ec686260b1821f07b44ed88dcd4e0

Malware Analysis – ransomware – 4f2d1e4655d12d45efc26b1034034f9b

Malware Analysis – ransomware – 9ce251bd921f81553ada59816d764cde

Malware Analysis – ransomware – 4ebe2c03a302bcf4dee5d444101ee2d1

Malware Analysis – smokeloader – 52ffaf10efe8795445a3df86abd0ded2

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed