OSINT

Malware Analysis – ransomware – b591669c02606c0be2de9179a0f15241

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b591669c02606c0be2de9179a0f15241SHA1: fd5eef2d45927b98346cd142880247985106cba3ANALYSIS DATE: 2022-10-15T03:43:27ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 21194863c52f9f61347cb57f7c4eb9bc

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 21194863c52f9f61347cb57f7c4eb9bcSHA1: 0adaf7449180d90f9d4aa52ccd7eec8d2f37a4bfANALYSIS DATE: 2022-10-15T03:44:08ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – f6d05f1f65b85eb1228f6524bb3773e8

October 15, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: f6d05f1f65b85eb1228f6524bb3773e8SHA1: 2c1a3b5de5d9e34e20fcf39671b4359abd38507cANALYSIS DATE: 2022-10-15T04:17:03ZTTPS: T1112, T1088, T1089, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 0a22c178904b4fdc53b009f88de26b86

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0a22c178904b4fdc53b009f88de26b86SHA1: c33aeab0b4584c3be2271ca0bb95678289c3eba2ANALYSIS DATE: 2022-10-15T03:44:28ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 0ce864dc7c370c4f65b60c846ed19200

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0ce864dc7c370c4f65b60c846ed19200SHA1: 7796687e1eb14307c18bd52e5dc3d3c31785823fANALYSIS DATE: 2022-10-15T03:44:18ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 83d9a99d119b6cc5b114753d3e37f8f0

October 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 83d9a99d119b6cc5b114753d3e37f8f0SHA1: f69859b15315050efd2609dc787757ca6c0ce196ANALYSIS DATE: 2022-10-15T04:20:08ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – ransomware – 44577b39b8038f90ccb92137cf27e327

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 44577b39b8038f90ccb92137cf27e327SHA1: 70344930f9804bdcd081d447682d018ed087ca87ANALYSIS DATE: 2022-10-15T04:30:21ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9e16c007fdac055e76ef2d60e672eec5

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9e16c007fdac055e76ef2d60e672eec5SHA1: 2af383f6f50a1d35be2119356167835f3620e1d0ANALYSIS DATE: 2022-10-15T04:30:12ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 35103c5708eb87e5440e8023e59a4955

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 35103c5708eb87e5440e8023e59a4955SHA1: 5164063d5c20b040674fea404f84224e27b6ef3fANALYSIS DATE: 2022-10-15T04:30:26ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Experts disclose technical details of now-patched CVE-2022-37969 Windows Zero-Day

October 15, 2022

Researchers disclosed details of a now-patched flaw, tracked as CVE-2022-37969, in Windows Common Log File System (CLFS). The CVE-2022-37969 (CVSS score:...

Malware Analysis – djvu – 2dd757e54c502a35f8c659dcfd319f4d

October 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2dd757e54c502a35f8c659dcfd319f4dSHA1: da1a7e48fac3865678cba0514aa61e8da3e5d2afANALYSIS DATE: 2022-10-14T20:44:10ZTTPS: T1012, T1005, T1081, T1222,...

Malware Analysis – djvu – f1377d04bf69c8252eb15b0009451f27

October 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f1377d04bf69c8252eb15b0009451f27SHA1: 1a059a7cff0ebc701f732180f0e11165ddadf661ANALYSIS DATE: 2022-10-14T20:55:52ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 1ae23a5f0a5e8f9b0d900cdf77ab06a1

October 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1ae23a5f0a5e8f9b0d900cdf77ab06a1SHA1: b9ddf0f66e7bcc35fd42edb83d81c972e07e348dANALYSIS DATE: 2022-10-14T20:34:55ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – 54f91e976d7af909f689a82a8c4e0df8

October 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 54f91e976d7af909f689a82a8c4e0df8SHA1: 488f444c1d922c2137a5843d2d3925b7f6ca6e9eANALYSIS DATE: 2022-10-14T21:32:03ZTTPS: T1012, T1082, T1053, T1222,...

Malware Analysis – – 5943d8702e40a5ccd62e5a8d4c8852aa

October 15, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: 5943d8702e40a5ccd62e5a8d4c8852aaSHA1: c7f781f0baca9ddf424ba7e7532fd5566b58e48aANALYSIS DATE: 2022-10-14T21:42:30ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 00d5d44fa85b988b3fb1396e8fd1375a

October 15, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 00d5d44fa85b988b3fb1396e8fd1375aSHA1: 2e3febd24a9d28ac17b6d7b324b98e4dcaf5890eANALYSIS DATE: 2022-10-14T21:34:17ZTTPS: T1112, T1042, T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – feba408eb9862548dc19c524be12f2b8

October 15, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: feba408eb9862548dc19c524be12f2b8SHA1: 8e6af2bd48523d64aafe150b89a3eca61cad0d58ANALYSIS DATE: 2022-10-14T21:40:05ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – 4448083027bde42252a132ba5be0bd25

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4448083027bde42252a132ba5be0bd25SHA1: 2637028e5bccda6f186f1f323e97bdd5858b90a3ANALYSIS DATE: 2022-10-14T22:06:05ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 4bd4fcdf39d6c79a71884a80ac3cafe7

October 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4bd4fcdf39d6c79a71884a80ac3cafe7SHA1: 1e05ec01474a5be43d96e03db9ae43838e9ada03ANALYSIS DATE: 2022-10-14T21:44:53ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – ransomware – dfb89b842afd8be96bca529084ebbd77

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: dfb89b842afd8be96bca529084ebbd77SHA1: ff68271ede970bea75d00dd5a55ae9a4301a61b4ANALYSIS DATE: 2022-10-14T22:04:27ZTTPS: T1059, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – 442b1d885cd1900bb4881ddd90e4636c

October 15, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 442b1d885cd1900bb4881ddd90e4636cSHA1: 6547f759a860d21464f319683fddfc87742f8b46ANALYSIS DATE: 2022-10-14T22:06:00ZTTPS: T1082, T1012, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 124[.]222[.]69[.]133:80

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 198[.]98[.]59[.]150:8443

October 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 445b6f8ea1ef74e908a4fbc9605e600b

October 15, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 445b6f8ea1ef74e908a4fbc9605e600bSHA1: 399c9f1551bdd54119dd3376ada59dcddb0fdbd3ANALYSIS DATE: 2022-10-14T22:09:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

OSINT

Malware Analysis – ransomware – b591669c02606c0be2de9179a0f15241

Malware Analysis – ransomware – 21194863c52f9f61347cb57f7c4eb9bc

Malware Analysis – evasion – f6d05f1f65b85eb1228f6524bb3773e8

Malware Analysis – ransomware – 0a22c178904b4fdc53b009f88de26b86

Malware Analysis – ransomware – 0ce864dc7c370c4f65b60c846ed19200

Malware Analysis – djvu – 83d9a99d119b6cc5b114753d3e37f8f0

Malware Analysis – ransomware – 44577b39b8038f90ccb92137cf27e327

Malware Analysis – ransomware – 9e16c007fdac055e76ef2d60e672eec5

Malware Analysis – ransomware – 35103c5708eb87e5440e8023e59a4955

Experts disclose technical details of now-patched CVE-2022-37969 Windows Zero-Day

Malware Analysis – djvu – 2dd757e54c502a35f8c659dcfd319f4d

Malware Analysis – djvu – f1377d04bf69c8252eb15b0009451f27

Malware Analysis – djvu – 1ae23a5f0a5e8f9b0d900cdf77ab06a1

Malware Analysis – djvu – 54f91e976d7af909f689a82a8c4e0df8

Malware Analysis – – 5943d8702e40a5ccd62e5a8d4c8852aa

Malware Analysis – discovery – 00d5d44fa85b988b3fb1396e8fd1375a

Malware Analysis – discovery – feba408eb9862548dc19c524be12f2b8

Malware Analysis – ransomware – 4448083027bde42252a132ba5be0bd25

Malware Analysis – djvu – 4bd4fcdf39d6c79a71884a80ac3cafe7

Malware Analysis – ransomware – dfb89b842afd8be96bca529084ebbd77

Malware Analysis – discovery – 442b1d885cd1900bb4881ddd90e4636c

Cobalt Stike Beacon Detected – 124[.]222[.]69[.]133:80

Cobalt Stike Beacon Detected – 198[.]98[.]59[.]150:8443

Malware Analysis – smokeloader – 445b6f8ea1ef74e908a4fbc9605e600b

France Jacks Into The Matrix For State Messaging – And Pays Too

Azure’s Bad Night Fuels Fresh Calls For Cloud Diversification In Europe

Australian Police Building Ai To Translate Emoji Used By ‘crimefluencers’

Proton Trains New Service To Expose Corporate Infosec Cover Ups

Docker Compose Vulnerability Opens Door To Host Level Writes – Patch Pronto

You may have missed