OSINT

Malware Analysis – smokeloader – 699a1d7bd4b78fc10a1038ae8ae9f807

October 10, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 699a1d7bd4b78fc10a1038ae8ae9f807SHA1: 76e4ba6b26cd66682ea01f59bafe382047433e5fANALYSIS DATE: 2022-10-10T14:32:09ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c9293d9e2fa1d7c3385306642cd93561

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c9293d9e2fa1d7c3385306642cd93561SHA1: cbecf06db239e37ad4bac853316fe998b6499bceANALYSIS DATE: 2022-10-10T14:42:03ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – djvu – 699a1d7bd4b78fc10a1038ae8ae9f807

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:newpatch13, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 699a1d7bd4b78fc10a1038ae8ae9f807SHA1:...

Malware Analysis – djvu – 33a7bcba56f2e5b227db73d8ea984bad

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 33a7bcba56f2e5b227db73d8ea984badSHA1: 768e0b8a4d2c8f8504d60fd0eb7b3bd8eaa88106ANALYSIS DATE: 2022-10-10T14:46:58ZTTPS: T1012, T1222, T1082, T1053,...

Malware Analysis – ransomware – aaf1bcf03a52222618125b575e0edb07

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: aaf1bcf03a52222618125b575e0edb07SHA1: a0d8ac1b50a265aeed46288426f17c11cffe90acANALYSIS DATE: 2022-10-10T14:59:21ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – chaos – f0f99d523865a55b7ee5e6cb3e1e9413

October 10, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, family:neshta, persistence, ransomware, spyware, stealerMD5: f0f99d523865a55b7ee5e6cb3e1e9413SHA1: bb04f194f402963c79874f8e7cc5f7df05c6f5e1ANALYSIS DATE: 2022-10-10T14:55:27ZTTPS: T1005, T1081, T1082, T1112, T1042 ScoreMeaningExample10Known...

Malware Analysis – ransomware – abbb5efdc4cb1475d9504177b8d9f8c6

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: abbb5efdc4cb1475d9504177b8d9f8c6SHA1: 2827c2240294ddc8d292599fba640a3b5c9505f7ANALYSIS DATE: 2022-10-10T14:59:28ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – chaos – f0f99d523865a55b7ee5e6cb3e1e9413

October 10, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, family:neshta, persistence, ransomware, spyware, stealerMD5: f0f99d523865a55b7ee5e6cb3e1e9413SHA1: bb04f194f402963c79874f8e7cc5f7df05c6f5e1ANALYSIS DATE: 2022-10-10T14:56:05ZTTPS: T1082, T1112, T1042, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – wannacry – 52f48c0b06b658209ff62a72033b3ff2

October 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 52f48c0b06b658209ff62a72033b3ff2SHA1: 37e6e9d210ba2dc038cc0ea9413af2fa537ff72eANALYSIS DATE: 2022-10-10T14:59:59ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – e01561e6bad1159cbc3380c79766655d

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e01561e6bad1159cbc3380c79766655dSHA1: 36c7701217ace3af49bf3d3fa6bd6aa5a49cb6d0ANALYSIS DATE: 2022-10-10T14:59:39ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – b6aeab8b14c4279100d7f14b78dc4ec5

October 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: b6aeab8b14c4279100d7f14b78dc4ec5SHA1: 887fc185484327153b63d5d356fe3a5eaebf105cANALYSIS DATE: 2022-10-10T15:00:04ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – be1958914284592f775bc245b5bf0b3f

October 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: be1958914284592f775bc245b5bf0b3fSHA1: c9fa74053e26ff5902e9ba459703820d0a03e540ANALYSIS DATE: 2022-10-10T14:59:56ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – be1958914284592f775bc245b5bf0b3f

October 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: be1958914284592f775bc245b5bf0b3fSHA1: c9fa74053e26ff5902e9ba459703820d0a03e540ANALYSIS DATE: 2022-10-10T15:00:07ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – aaf1bcf03a52222618125b575e0edb07

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: aaf1bcf03a52222618125b575e0edb07SHA1: a0d8ac1b50a265aeed46288426f17c11cffe90acANALYSIS DATE: 2022-10-10T15:00:05ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – e01561e6bad1159cbc3380c79766655d

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e01561e6bad1159cbc3380c79766655dSHA1: 36c7701217ace3af49bf3d3fa6bd6aa5a49cb6d0ANALYSIS DATE: 2022-10-10T15:00:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – abbb5efdc4cb1475d9504177b8d9f8c6

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: abbb5efdc4cb1475d9504177b8d9f8c6SHA1: 2827c2240294ddc8d292599fba640a3b5c9505f7ANALYSIS DATE: 2022-10-10T15:00:06ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – f73ecd0ef82e8b90fb77993844c67a4e

October 10, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f73ecd0ef82e8b90fb77993844c67a4eSHA1: 0d1f3773e48511d2db1c3f5e42d7b5dfe4099fe8ANALYSIS DATE: 2022-10-10T15:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – b6aeab8b14c4279100d7f14b78dc4ec5

October 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: b6aeab8b14c4279100d7f14b78dc4ec5SHA1: 887fc185484327153b63d5d356fe3a5eaebf105cANALYSIS DATE: 2022-10-10T15:00:07ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – aea27ffbdf2dfef48d00175885c8e0c7

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: aea27ffbdf2dfef48d00175885c8e0c7SHA1: ebf2b5af0636e936045fcd1a6d912e5cbb548690ANALYSIS DATE: 2022-10-10T15:05:51ZTTPS: T1130, T1112, T1005, T1081,...

Malware Analysis – wannacry – 52f48c0b06b658209ff62a72033b3ff2

October 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 52f48c0b06b658209ff62a72033b3ff2SHA1: 37e6e9d210ba2dc038cc0ea9413af2fa537ff72eANALYSIS DATE: 2022-10-10T15:00:07ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 00f4cfd75c035ccad4aa61855421d91e

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 00f4cfd75c035ccad4aa61855421d91eSHA1: 0ed7baad80e9f2d3ef89c3f203cde6ab24fd58acANALYSIS DATE: 2022-10-10T15:15:49ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – smokeloader – 1ed51513b10d1601f8b862ce9c153d2f

October 10, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1ed51513b10d1601f8b862ce9c153d2fSHA1: 862c6a9dacf27a6c68f51ebbd5189a43b5bb09daANALYSIS DATE: 2022-10-10T15:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ff499c2ba7ab1fe68883ef6558155a3f

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ff499c2ba7ab1fe68883ef6558155a3fSHA1: 4ba8e4f2e450991c6ddd5a1c7c0ce6739179b5f3ANALYSIS DATE: 2022-10-10T15:32:11ZTTPS: T1222, T1060, T1112, T1082,...

Malware Analysis – djvu – 1ed51513b10d1601f8b862ce9c153d2f

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 1ed51513b10d1601f8b862ce9c153d2fSHA1: 862c6a9dacf27a6c68f51ebbd5189a43b5bb09daANALYSIS DATE: 2022-10-10T15:40:07ZTTPS:...

OSINT

Malware Analysis – smokeloader – 699a1d7bd4b78fc10a1038ae8ae9f807

Malware Analysis – djvu – c9293d9e2fa1d7c3385306642cd93561

Malware Analysis – djvu – 699a1d7bd4b78fc10a1038ae8ae9f807

Malware Analysis – djvu – 33a7bcba56f2e5b227db73d8ea984bad

Malware Analysis – ransomware – aaf1bcf03a52222618125b575e0edb07

Malware Analysis – chaos – f0f99d523865a55b7ee5e6cb3e1e9413

Malware Analysis – ransomware – abbb5efdc4cb1475d9504177b8d9f8c6

Malware Analysis – chaos – f0f99d523865a55b7ee5e6cb3e1e9413

Malware Analysis – wannacry – 52f48c0b06b658209ff62a72033b3ff2

Malware Analysis – ransomware – e01561e6bad1159cbc3380c79766655d

Malware Analysis – wannacry – b6aeab8b14c4279100d7f14b78dc4ec5

Malware Analysis – wannacry – be1958914284592f775bc245b5bf0b3f

Malware Analysis – wannacry – be1958914284592f775bc245b5bf0b3f

Malware Analysis – ransomware – aaf1bcf03a52222618125b575e0edb07

Malware Analysis – ransomware – e01561e6bad1159cbc3380c79766655d

Malware Analysis – ransomware – abbb5efdc4cb1475d9504177b8d9f8c6

Malware Analysis – smokeloader – f73ecd0ef82e8b90fb77993844c67a4e

Malware Analysis – wannacry – b6aeab8b14c4279100d7f14b78dc4ec5

Malware Analysis – djvu – aea27ffbdf2dfef48d00175885c8e0c7

Malware Analysis – wannacry – 52f48c0b06b658209ff62a72033b3ff2

Malware Analysis – djvu – 00f4cfd75c035ccad4aa61855421d91e

Malware Analysis – smokeloader – 1ed51513b10d1601f8b862ce9c153d2f

Malware Analysis – djvu – ff499c2ba7ab1fe68883ef6558155a3f

Malware Analysis – djvu – 1ed51513b10d1601f8b862ce9c153d2f

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed