OSINT

Malware Analysis – evasion – 9c7e4e17df4b373ef137d1611e0f902c

October 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojan, upxMD5: 9c7e4e17df4b373ef137d1611e0f902cSHA1: 84392abdf2f3fd70aac778d6c248786514de64caANALYSIS DATE: 2022-10-26T22:28:58ZTTPS: T1082, T1060, T1112, T1089, T1004, T1088,...

Malware Analysis – cryptolocker – ffeae4a391a1d5203bd04b4161557227

October 27, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: ffeae4a391a1d5203bd04b4161557227SHA1: 7c7013dd8def75c94828b40ffa139b6d89ec4683ANALYSIS DATE: 2022-10-26T22:28:41ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 155[.]94[.]133[.]243:8080

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 116[.]203[.]17[.]128:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]224[.]116[.]32:1000

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]17:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – bbeefd87f5fb85d9575f0c14864c717a

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: bbeefd87f5fb85d9575f0c14864c717aSHA1: 90b156a97f9cf986f427478e66b28fd043364e71ANALYSIS DATE: 2022-10-26T22:40:24ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – joker – 4ba2d52786e2bcd0d9447ec1de087adb

October 27, 2022

Score: 10 MALWARE FAMILY: jokerTAGS:family:joker, discovery, infostealer, persistence, ransomware, trojanMD5: 4ba2d52786e2bcd0d9447ec1de087adbSHA1: a8685d4f9eea009ebd2cfb5e2807987fc0870a45ANALYSIS DATE: 2022-10-26T22:34:22ZTTPS: T1060, T1112, T1005, T1158, T1057, T1082,...

Malware Analysis – djvu – 8e3d0716be0c042c31434517d41f8894

October 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – evasion – b2dbb36c7dde16ddc0e751ccc25761db

October 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojanMD5: b2dbb36c7dde16ddc0e751ccc25761dbSHA1: 5ed7353a9d68a883b26c26bcd5ad1bb466cf6855ANALYSIS DATE: 2022-10-26T22:28:59ZTTPS: T1088, T1089, T1112, T1082, T1031, T1060, T1004,...

Cobalt Stike Beacon Detected – 139[.]196[.]237[.]171:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]22:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]154[.]13[.]128:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 35[.]89[.]139[.]95:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 7548a88d0b78e9d0dcc189390a9b7a22

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7548a88d0b78e9d0dcc189390a9b7a22SHA1: 858feecd4f64e5a169db5f73c4342336843c2382ANALYSIS DATE: 2022-10-26T22:40:32ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 294a4cd1f2a8760a0aebee89ffcbbd96

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 294a4cd1f2a8760a0aebee89ffcbbd96SHA1: f5ce37cff3b02028346a7c046ec9c5075d3268e3ANALYSIS DATE: 2022-10-26T22:40:42ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – a904ae59207985b05c045ded383e05a5

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a904ae59207985b05c045ded383e05a5SHA1: 54b685cdff1db745e5b90154d2e1d39b93817c4fANALYSIS DATE: 2022-10-26T22:40:59ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – fbb392081a6b3866e045b439de338192

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fbb392081a6b3866e045b439de338192SHA1: 910cdf612161c3ac8d7293eb9ee5556a390202cdANALYSIS DATE: 2022-10-26T22:40:53ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – b5585ac17390ab29e440ba3588f3a190

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b5585ac17390ab29e440ba3588f3a190SHA1: 71e215327bff3a010f1c60ff725ac8a3faf98ed9ANALYSIS DATE: 2022-10-26T22:41:09ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – d199170c833669792b4fac70842b9188

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d199170c833669792b4fac70842b9188SHA1: 897cff11d1ffe41834159817d49e73256fe9ced9ANALYSIS DATE: 2022-10-26T22:41:04ZTTPS: T1082, T1091, T1005, T1081, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 1ae9b2c4c1ee0618543d152e41e61776

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 1ae9b2c4c1ee0618543d152e41e61776SHA1: 94a33d5ef4c5ce30878d3536048358b023dfa4c6ANALYSIS DATE: 2022-10-26T22:41:20ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – a3214ca1f3847f81b9812fbb3b152556

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a3214ca1f3847f81b9812fbb3b152556SHA1: fe5f16bfeb66d6f8c6be5c9055f6861736758c68ANALYSIS DATE: 2022-10-26T22:41:13ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Threat Actors Target AWS EC2 Workloads to Steal Credentials

October 26, 2022

We found malicious samples attempting to steal Amazon Elastic Compute Cloud (EC2) Workloads' access keys and tokens via typosquatting and...

Addressing Ransomware in Hospitals & Medical Devices

October 26, 2022

Ransomware attacks have been on the rise in recent years, and hospitals are increasingly becoming targets. In many cases, these...

OSINT

Malware Analysis – evasion – 9c7e4e17df4b373ef137d1611e0f902c

Malware Analysis – cryptolocker – ffeae4a391a1d5203bd04b4161557227

Cobalt Stike Beacon Detected – 155[.]94[.]133[.]243:8080

Cobalt Stike Beacon Detected – 116[.]203[.]17[.]128:80

Cobalt Stike Beacon Detected – 139[.]224[.]116[.]32:1000

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]17:443

Malware Analysis – ransomware – bbeefd87f5fb85d9575f0c14864c717a

Malware Analysis – joker – 4ba2d52786e2bcd0d9447ec1de087adb

Malware Analysis – djvu – 8e3d0716be0c042c31434517d41f8894

Malware Analysis – evasion – b2dbb36c7dde16ddc0e751ccc25761db

Cobalt Stike Beacon Detected – 139[.]196[.]237[.]171:443

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]22:80

Cobalt Stike Beacon Detected – 45[.]154[.]13[.]128:443

Cobalt Stike Beacon Detected – 35[.]89[.]139[.]95:443

Malware Analysis – ransomware – 7548a88d0b78e9d0dcc189390a9b7a22

Malware Analysis – ransomware – 294a4cd1f2a8760a0aebee89ffcbbd96

Malware Analysis – ransomware – a904ae59207985b05c045ded383e05a5

Malware Analysis – ransomware – fbb392081a6b3866e045b439de338192

Malware Analysis – ransomware – b5585ac17390ab29e440ba3588f3a190

Malware Analysis – ransomware – d199170c833669792b4fac70842b9188

Malware Analysis – ransomware – 1ae9b2c4c1ee0618543d152e41e61776

Malware Analysis – ransomware – a3214ca1f3847f81b9812fbb3b152556

Threat Actors Target AWS EC2 Workloads to Steal Credentials

Addressing Ransomware in Hospitals & Medical Devices

[QILIN] – Ransomware Victim: ANCO

[AKIRA] – Ransomware Victim: Montage Marketing Services

[AKIRA] – Ransomware Victim: Morris Communications Company LLC

[AKIRA] – Ransomware Victim: Seasons Federal Credit Union

[INCRANSOM] – Ransomware Victim: Vitalmex

You may have missed