Security

Malware Analysis – discovery – 5bf8357e10b0612263d5c6076f398696

October 30, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 5bf8357e10b0612263d5c6076f398696SHA1: 54a40fb8c3bd659886b75acc71ec84a2b87bd0f7ANALYSIS DATE: 2022-10-29T15:48:27ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – xorist – 0dcdb939e8524ce89fdfb91a2e675e93

October 30, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealerMD5: 0dcdb939e8524ce89fdfb91a2e675e93SHA1: a68934aed2b0a430dab8f7ef3a960218faebe583ANALYSIS DATE: 2022-10-29T15:51:06ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – infostealer – cbaa738a6160ccc140be1ff70480dd0a

October 30, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: cbaa738a6160ccc140be1ff70480dd0aSHA1: 0869cc449351fb3d911191b447969cfb45d179e4ANALYSIS DATE: 2022-10-29T15:33:42ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ctblocker – 1ea130f39d90ae08b289a13406410ec3

October 30, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: 1ea130f39d90ae08b289a13406410ec3SHA1: f87fcf3b7becd3ada883a42f79e05943abb21c09ANALYSIS DATE: 2022-10-29T15:41:00ZTTPS: T1491, T1112, T1082, T1107, T1490, T1012 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 107[.]173[.]70[.]169:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]150[.]173[.]228:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]225[.]154[.]203:80

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ctblocker – 95f60b5b36d63307d83e3f3de9675a1d

October 30, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: 95f60b5b36d63307d83e3f3de9675a1dSHA1: da733991d9618b3a3bb5cc503ba0e860f1e8ea29ANALYSIS DATE: 2022-10-29T15:55:01ZTTPS: T1082, T1107, T1490, T1491, T1112, T1012 ScoreMeaningExample10Known badA malware family...

Malware Analysis – wannacry – ac632aeca091d4ac3ac0cf160f787032

October 30, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: ac632aeca091d4ac3ac0cf160f787032SHA1: 0c9f8c9ca978cdec4781b60b4e941e44bd5c8bdcANALYSIS DATE: 2022-10-29T20:20:27ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – 07b9898ff9ae398d6d43e898cafc87bd

October 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 07b9898ff9ae398d6d43e898cafc87bdSHA1: 387eb977a49b10c3c245f2a8ccdd401af83c00b4ANALYSIS DATE: 2022-10-29T15:57:14ZTTPS: T1107, T1490, T1112, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – ed8723ee64b277fd0f60732895c087d8

October 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: ed8723ee64b277fd0f60732895c087d8SHA1: 34fcea43abfe51973953bd64792fe21e593aca05ANALYSIS DATE: 2022-10-29T15:57:11ZTTPS: T1107, T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 103[.]135[.]101[.]182:8443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]221[.]252[.]231:80

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]91:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]222[.]181[.]79:7777

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – 3d5811564acf2f7726833cd0f0f3e82c

October 30, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 3d5811564acf2f7726833cd0f0f3e82cSHA1: d7cebf3154d488de7483b3ed19a115eeb5f02896ANALYSIS DATE: 2022-10-29T21:23:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – e03466a56b1cbd1ab65949e82c1e8a05

October 30, 2022

Score: 10 MALWARE FAMILY: TAGS:MD5: e03466a56b1cbd1ab65949e82c1e8a05SHA1: 159c6917dd528df56ef0c4f41d06d2f567e54b3fANALYSIS DATE: 2022-10-29T21:48:44ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 457bbbee8fb7b64a5824d80ff19b7092

October 30, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 457bbbee8fb7b64a5824d80ff19b7092SHA1: d976cec45ae1605dde841e9b47dac57f78e7b725ANALYSIS DATE: 2022-10-29T21:31:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 8ff45c762ee4259f7bc2fc2e2372283a

October 30, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8ff45c762ee4259f7bc2fc2e2372283aSHA1: 6fc6037833b71e67e8c229514b9cea589ca2cc8bANALYSIS DATE: 2022-10-29T20:56:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 18[.]191[.]177[.]87:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]29[.]82[.]40:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]55[.]2[.]194:4545

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]130[.]45[.]159:443

October 30, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – wannacry – c811454bbc5b86a0621a7cafb34db16f

October 30, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: c811454bbc5b86a0621a7cafb34db16fSHA1: 981715e9b580cecc57006b326886acc08c52c18fANALYSIS DATE: 2022-10-29T22:40:23ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Security

Malware Analysis – discovery – 5bf8357e10b0612263d5c6076f398696

Malware Analysis – xorist – 0dcdb939e8524ce89fdfb91a2e675e93

Malware Analysis – infostealer – cbaa738a6160ccc140be1ff70480dd0a

Malware Analysis – ctblocker – 1ea130f39d90ae08b289a13406410ec3

Cobalt Stike Beacon Detected – 107[.]173[.]70[.]169:443

Cobalt Stike Beacon Detected – 103[.]150[.]173[.]228:443

Cobalt Stike Beacon Detected – 104[.]225[.]154[.]203:80

Malware Analysis – ctblocker – 95f60b5b36d63307d83e3f3de9675a1d

Malware Analysis – wannacry – ac632aeca091d4ac3ac0cf160f787032

Malware Analysis – evasion – 07b9898ff9ae398d6d43e898cafc87bd

Malware Analysis – evasion – ed8723ee64b277fd0f60732895c087d8

Cobalt Stike Beacon Detected – 103[.]135[.]101[.]182:8443

Cobalt Stike Beacon Detected – 124[.]221[.]252[.]231:80

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]91:443

Cobalt Stike Beacon Detected – 124[.]222[.]181[.]79:7777

Malware Analysis – evasion – 3d5811564acf2f7726833cd0f0f3e82c

Malware Analysis – – e03466a56b1cbd1ab65949e82c1e8a05

Malware Analysis – evasion – 457bbbee8fb7b64a5824d80ff19b7092

Malware Analysis – smokeloader – 8ff45c762ee4259f7bc2fc2e2372283a

Cobalt Stike Beacon Detected – 18[.]191[.]177[.]87:443

Cobalt Stike Beacon Detected – 119[.]29[.]82[.]40:443

Cobalt Stike Beacon Detected – 106[.]55[.]2[.]194:4545

Cobalt Stike Beacon Detected – 185[.]130[.]45[.]159:443

Malware Analysis – wannacry – c811454bbc5b86a0621a7cafb34db16f

[KAWA4096] – Ransomware Victim: tokiomarine-nichido[.]co[.]jp

[KAWA4096] – Ransomware Victim: www[.]ogr-jp[.]com

[QILIN] – Ransomware Victim: exhibits-intl[.]com

CVE Alert: CVE-2024-12915

CVE Alert: CVE-2025-2895

You may have missed