Security

Malware Analysis – ransomware – b8c0eedfe9d2b511cd073910c7e42f10

November 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b8c0eedfe9d2b511cd073910c7e42f10SHA1: fe74589e2c22e0af63365236d01c467c77ee097aANALYSIS DATE: 2022-11-26T04:59:44ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – 12a2da01ed2dbe86f5ff0895aaaf0fbd

November 26, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 12a2da01ed2dbe86f5ff0895aaaf0fbdSHA1: 8fdddc4719b91f75508c32293c3762935c8a4dc7ANALYSIS DATE: 2022-11-26T04:59:46ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – infostealer – ab79cc6ad8a796388f7bef953588a00f

November 26, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: ab79cc6ad8a796388f7bef953588a00fSHA1: 1a7d973296709806d223d167c379e2bc9c05bbadANALYSIS DATE: 2022-11-26T05:14:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – be7e3c9c60ba450c1c223facf6d663a6

November 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1859, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: be7e3c9c60ba450c1c223facf6d663a6SHA1: b30c637aecfb24e7c304225f58197c59928fe854ANALYSIS...

Malware Analysis – djvu – 65c77508547ff791d86e6647bea789d0

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 65c77508547ff791d86e6647bea789d0SHA1: 7d420f8623b3d25d6b542cd0e1c29d581aa80bcdANALYSIS DATE: 2022-11-26T15:34:04ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – – d13b84a2f7eefc4c053243c5fd1228ea

November 26, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: d13b84a2f7eefc4c053243c5fd1228eaSHA1: 087e2318995e6fc7756a5a72683d4c776946252fANALYSIS DATE: 2022-11-26T15:11:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – eb9b456c435176047d50d3b2ffa59c78

November 26, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: eb9b456c435176047d50d3b2ffa59c78SHA1: 8622f6505ca7f82d56858a970370adb4440232b3ANALYSIS DATE: 2022-11-26T05:15:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 6b757918bc696d1e180dc0f84198685c

November 26, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6b757918bc696d1e180dc0f84198685cSHA1: 27d2378ae60017748e2e5d39025d2eea1fdb40d0ANALYSIS DATE: 2022-11-26T17:14:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – c9bdfd2d99730f4969b16daa7b55f09c

November 26, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, ransomware, trojanMD5: c9bdfd2d99730f4969b16daa7b55f09cSHA1: d7a3f9e0df14aa53336271f6a80a6a968f52305eANALYSIS DATE: 2022-11-26T15:44:16ZTTPS: T1031, T1112, T1089, T1053, T1012, T1082, T1107,...

Malware Analysis – djvu – f0c42dfc1a905aaf9dc0eb1a328f8c7d

November 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f0c42dfc1a905aaf9dc0eb1a328f8c7dSHA1: 6e3795d31232791512b80740d7dcb16bfeef5730ANALYSIS DATE: 2022-11-26T17:45:36ZTTPS: T1130, T1112, T1082, T1005,...

Malware Analysis – smokeloader – 042bf9ef90bfc59d329618c720213b4f

November 26, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 042bf9ef90bfc59d329618c720213b4fSHA1: 87b55b3906d5bc2d19222faeeca56d653a0f2692ANALYSIS DATE: 2022-11-26T16:24:50ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

MSMAP – Memory WebShell Generator

November 26, 2022

Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, WebShell / Proxy / Killer and Management Clients....

Malware Analysis – evasion – 5fc105c167f1921ea2b40ad2532bb7f1

November 26, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 5fc105c167f1921ea2b40ad2532bb7f1SHA1: 26761b00fff0df1fc01d3efd56a5faf269ac4374ANALYSIS DATE: 2022-11-25T23:16:05ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – gozi – 9362eacaddec77615f128fb7a27c28f7

November 26, 2022

Score: 10 MALWARE FAMILY: goziTAGS:family:gozi, botnet:1012, banker, isfb, persistence, ransomware, trojanMD5: 9362eacaddec77615f128fb7a27c28f7SHA1: 3f406c83d76cda76e30615cc148f4c53e5a2b4cbANALYSIS DATE: 2022-11-25T23:28:20ZTTPS: T1060, T1112, T1082, T1158, T1491...

Malware Analysis – ctblocker – 8002e12ee374b2cb136757a46116244b

November 26, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: 8002e12ee374b2cb136757a46116244bSHA1: 08afb20b09ebbeb30939389edc7e53b6f4c1fc57ANALYSIS DATE: 2022-11-25T23:06:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – gozi – 40cd2fec7ef2cada01d56afbae18015b

November 26, 2022

Score: 10 MALWARE FAMILY: goziTAGS:family:gozi, botnet:1012, banker, isfb, persistence, ransomware, trojanMD5: 40cd2fec7ef2cada01d56afbae18015bSHA1: 512de247dbceb55babbf55e9d0945810f389674dANALYSIS DATE: 2022-11-25T23:06:53ZTTPS: T1060, T1112, T1082, T1158, T1491...

Malware Analysis – ransomware – f7bf40a04f42e1f14e54a18d3c61897f

November 26, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f7bf40a04f42e1f14e54a18d3c61897fSHA1: 3eebc14f1c70ae9d4fa493c650a94d12257b2435ANALYSIS DATE: 2022-11-26T00:06:08ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 67a532c43f067779df6eac4ae0acc07c

November 26, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 67a532c43f067779df6eac4ae0acc07cSHA1: cbf2efd61bebfa08613cf66a66b87e0a8a259af8ANALYSIS DATE: 2022-11-25T23:31:19ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 65c094df3fd52240b1068d843ba91a1f

November 26, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 65c094df3fd52240b1068d843ba91a1fSHA1: bf071072b54701aacd3f303e94350ecce7642a50ANALYSIS DATE: 2022-11-25T23:55:52ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – de6e3970ad991d0214e6dfa06439e31f

November 26, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: de6e3970ad991d0214e6dfa06439e31fSHA1: b8792436f1541e76f4468769561b9a7bad03bd35ANALYSIS DATE: 2022-11-25T23:38:35ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 6e13ce8eed45e35d8fdaccd83fec9df0

November 26, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6e13ce8eed45e35d8fdaccd83fec9df0SHA1: e5a907db2f97081efda62aeb91633c8bf062653fANALYSIS DATE: 2022-11-26T00:19:30ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – gozi – f2c99d1468069fee1417e16f09bba493

November 26, 2022

Score: 10 MALWARE FAMILY: goziTAGS:family:gozi, botnet:1012, banker, isfb, persistence, ransomware, trojanMD5: f2c99d1468069fee1417e16f09bba493SHA1: d2e4cea9cf77cfddfad8f4eb572d1c8e64c64256ANALYSIS DATE: 2022-11-26T00:19:07ZTTPS: T1158, T1060, T1112, T1491, T1082...

Malware Analysis – gozi – cafb427e5aaf01dc82002021fa1c5211

November 26, 2022

Score: 10 MALWARE FAMILY: goziTAGS:family:gozi, botnet:1012, banker, isfb, persistence, ransomware, trojanMD5: cafb427e5aaf01dc82002021fa1c5211SHA1: 5936a585083d8d8955b70fdf0153071de2360af3ANALYSIS DATE: 2022-11-26T00:18:09ZTTPS: T1082, T1158, T1060, T1112, T1491...

Malware Analysis – adware – 904ea4ab8e83c9da097992e3074f7c30

November 26, 2022

Score: 9 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 904ea4ab8e83c9da097992e3074f7c30SHA1: 5c2aba18286c7b375e7087a44ea1326b2960036eANALYSIS DATE: 2022-11-26T00:14:20ZTTPS: T1012, T1120, T1082, T1112, T1176, T1060,...

Security

Malware Analysis – ransomware – b8c0eedfe9d2b511cd073910c7e42f10

Malware Analysis – persistence – 12a2da01ed2dbe86f5ff0895aaaf0fbd

Malware Analysis – infostealer – ab79cc6ad8a796388f7bef953588a00f

Malware Analysis – amadey – be7e3c9c60ba450c1c223facf6d663a6

Malware Analysis – djvu – 65c77508547ff791d86e6647bea789d0

Malware Analysis – – d13b84a2f7eefc4c053243c5fd1228ea

Malware Analysis – ransomware – eb9b456c435176047d50d3b2ffa59c78

Malware Analysis – smokeloader – 6b757918bc696d1e180dc0f84198685c

Malware Analysis – discovery – c9bdfd2d99730f4969b16daa7b55f09c

Malware Analysis – djvu – f0c42dfc1a905aaf9dc0eb1a328f8c7d

Malware Analysis – smokeloader – 042bf9ef90bfc59d329618c720213b4f

MSMAP – Memory WebShell Generator

Malware Analysis – evasion – 5fc105c167f1921ea2b40ad2532bb7f1

Malware Analysis – gozi – 9362eacaddec77615f128fb7a27c28f7

Malware Analysis – ctblocker – 8002e12ee374b2cb136757a46116244b

Malware Analysis – gozi – 40cd2fec7ef2cada01d56afbae18015b

Malware Analysis – ransomware – f7bf40a04f42e1f14e54a18d3c61897f

Malware Analysis – evasion – 67a532c43f067779df6eac4ae0acc07c

Malware Analysis – evasion – 65c094df3fd52240b1068d843ba91a1f

Malware Analysis – evasion – de6e3970ad991d0214e6dfa06439e31f

Malware Analysis – persistence – 6e13ce8eed45e35d8fdaccd83fec9df0

Malware Analysis – gozi – f2c99d1468069fee1417e16f09bba493

Malware Analysis – gozi – cafb427e5aaf01dc82002021fa1c5211

Malware Analysis – adware – 904ea4ab8e83c9da097992e3074f7c30

Miljödata – 870,108 breached accounts

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

Cobalt Strike Beacon Detected – 106[.]54[.]239[.]134:80

Cobalt Strike Beacon Detected – 81[.]69[.]98[.]230:50010

Cobalt Strike Beacon Detected – 103[.]43[.]18[.]10:80

You may have missed