OSINT

Malware Analysis – evasion – 4c4b821ad0b7b56d3140642dd8b38130

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4c4b821ad0b7b56d3140642dd8b38130SHA1: 3813f159da1a1db846bdeef7908b9573d8a9a2bfANALYSIS DATE: 2022-10-21T02:17:27ZTTPS: T1012, T1120, T1082, T1060, T1112, T1088, T1089, T1091,...

Malware Analysis – evasion – 7c25d13bdb003c74b0aa93033c9d506d

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 7c25d13bdb003c74b0aa93033c9d506dSHA1: 1b1e69548ab251e9212e900050aa4f43c690442bANALYSIS DATE: 2022-10-21T02:17:22ZTTPS: T1491, T1112, T1060, T1082, T1004, T1042, T1490, T1091,...

Malware Analysis – chaos – 37fe2e312cff4d943402ecee7ecb6757

October 21, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: 37fe2e312cff4d943402ecee7ecb6757SHA1: d39d49c293c8289814b94d6dc5d1a9d61c2dbf39ANALYSIS DATE: 2022-10-21T08:20:07ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 6ebd19dc1ed9e9aac923dd481748a822

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, spyware, stealer, wormMD5: 6ebd19dc1ed9e9aac923dd481748a822SHA1: 6f521534713557b632def410cbba009cdb617da7ANALYSIS DATE: 2022-10-21T08:20:30ZTTPS: T1046, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – – e94ed62a28a9fd6f714c3e29b3636788

October 21, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: e94ed62a28a9fd6f714c3e29b3636788SHA1: f79fd307847deb43025017da5821700d7d83bc3bANALYSIS DATE: 2022-10-21T08:24:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 955a87720cab36806acf992685552830

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 955a87720cab36806acf992685552830SHA1: 79559db98b1530c2a29709114558a12669f8b9f0ANALYSIS DATE: 2022-10-21T08:29:00ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – surtr – 5409ee640663b8d1f520af46c1146c0e

October 21, 2022

Score: 10 MALWARE FAMILY: surtrTAGS:family:surtr, evasion, ransomware, upxMD5: 5409ee640663b8d1f520af46c1146c0eSHA1: 73eebd0dd94ce3d161a7f191196b8bcc354af55aANALYSIS DATE: 2022-10-21T08:20:23ZTTPS: T1490, T1059, T1107, T1485, T1082, T1012, T1120 ScoreMeaningExample10Known...

Malware Analysis – danabot – 7f3faa5965f0b3489a3fbbc305e7b0e0

October 21, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, bootkit, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 7f3faa5965f0b3489a3fbbc305e7b0e0SHA1:...

Malware Analysis – wannacry – 6fde18afcf48e21e23c7984487abf6b9

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 6fde18afcf48e21e23c7984487abf6b9SHA1: 2cf046a1485c2f1db310fee2ca65c46ad31ceccfANALYSIS DATE: 2022-10-21T08:40:30ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 3c37d81bc22dbb23d274d312e0be5abe

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3c37d81bc22dbb23d274d312e0be5abeSHA1: eecffb48af2fa209358778560cc9187bccf1b113ANALYSIS DATE: 2022-10-21T09:05:26ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – 6d9512776c224ad17a26a1ebb11c4057

October 21, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6d9512776c224ad17a26a1ebb11c4057SHA1: 79e2ee36a8004c37eababfcdb399fff0af324b08ANALYSIS DATE: 2022-10-21T09:07:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 204[.]10[.]120[.]109:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]151:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]85:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]4:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 8fde8356e42e1bffe6c17ee82f0cbe43

October 21, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: 8fde8356e42e1bffe6c17ee82f0cbe43SHA1: 5fdb9ae3ada1ab7a60ac0e6dbe473f5866f8980bANALYSIS DATE: 2022-10-21T09:16:53ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 95241c3bc1900fbeef743479073f82dc

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 95241c3bc1900fbeef743479073f82dcSHA1: 81b171f4fe1e769f85c67cbd47e10075960a2c73ANALYSIS DATE: 2022-10-21T09:20:49ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – wannacry – 15f71852c26b3668b8a29011a13569f9

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 15f71852c26b3668b8a29011a13569f9SHA1: 5c05775644c507b425fd99de73477ecb9ef293fcANALYSIS DATE: 2022-10-21T09:20:29ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 28e8c10d07e7dc23301be62f5a7feb0c

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 28e8c10d07e7dc23301be62f5a7feb0cSHA1: 5dbf1480615a29dea5c9589433bf3541dffccfb0ANALYSIS DATE: 2022-10-21T09:20:22ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]155:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]14:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]247:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]154:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – danabot – 34dac80c97059a81bd409cb658666582

October 21, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, backdoor, banker, collection, discovery, persistence, ransomware, trojanMD5: 34dac80c97059a81bd409cb658666582SHA1: 037e1563852f7e3e9febcadaf9a14f45ffcd66daANALYSIS DATE: 2022-10-21T09:33:16ZTTPS: T1082, T1012,...

OSINT

Malware Analysis – evasion – 4c4b821ad0b7b56d3140642dd8b38130

Malware Analysis – evasion – 7c25d13bdb003c74b0aa93033c9d506d

Malware Analysis – chaos – 37fe2e312cff4d943402ecee7ecb6757

Malware Analysis – wannacry – 6ebd19dc1ed9e9aac923dd481748a822

Malware Analysis – – e94ed62a28a9fd6f714c3e29b3636788

Malware Analysis – djvu – 955a87720cab36806acf992685552830

Malware Analysis – surtr – 5409ee640663b8d1f520af46c1146c0e

Malware Analysis – danabot – 7f3faa5965f0b3489a3fbbc305e7b0e0

Malware Analysis – wannacry – 6fde18afcf48e21e23c7984487abf6b9

Malware Analysis – djvu – 3c37d81bc22dbb23d274d312e0be5abe

Malware Analysis – ransomware – 6d9512776c224ad17a26a1ebb11c4057

Cobalt Stike Beacon Detected – 204[.]10[.]120[.]109:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]151:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]85:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]4:443

Malware Analysis – ransomware – 8fde8356e42e1bffe6c17ee82f0cbe43

Malware Analysis – djvu – 95241c3bc1900fbeef743479073f82dc

Malware Analysis – wannacry – 15f71852c26b3668b8a29011a13569f9

Malware Analysis – wannacry – 28e8c10d07e7dc23301be62f5a7feb0c

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]155:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]14:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]247:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]154:443

Malware Analysis – danabot – 34dac80c97059a81bd409cb658666582

HackerOne Bug Bounty Disclosure: socks-heap-buffer-overflow-via-malicious-http-redirect-with-oversized-hostname-abdullah

HackerOne Bug Bounty Disclosure: buffer-over-read-missing-nul-termination-in-addvariable-causes-undefined-behavior-sagorhawlader

HackerOne Bug Bounty Disclosure: blockstack-org-is-vulnerable-to-cve-cve–x-aulia

HackerOne Bug Bounty Disclosure: blockstack-browser-for-mac-leaks-core-api-password-to-rd-parties-frozensolid

HackerOne Bug Bounty Disclosure: logout-bypass-vulnerability-in-hiro-so-anonymous

You may have missed