Security

Malware Analysis – djvu – 211ffba6d8fe29258dd740dbe6c19e08

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 211ffba6d8fe29258dd740dbe6c19e08SHA1: 525c901952fde8683850484524d252418e700e31ANALYSIS DATE: 2022-10-23T04:39:19ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – ransomware – 0841781ce334fa545cf5ced3df6b019d

October 23, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0841781ce334fa545cf5ced3df6b019dSHA1: 60089d8fe3993084aef5b6100bc4019675543294ANALYSIS DATE: 2022-10-23T04:41:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 54639aa125db4aebe41299332989f3a0

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, upxMD5: 54639aa125db4aebe41299332989f3a0SHA1: 068acdc404596d7941cf3ab35b90c1fff813913eANALYSIS DATE: 2022-10-21T17:29:44ZTTPS: T1082, T1012, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 13db9c3f1244dc2bdd0dca16dae87466

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 13db9c3f1244dc2bdd0dca16dae87466SHA1: 814564b8906a83139f1d8b987e75fd2bf7209f28ANALYSIS DATE: 2022-10-21T18:40:44ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – adware – 5bb9e6b6ee66206e848b5ae8e13a6050

October 23, 2022

Score: 9 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 5bb9e6b6ee66206e848b5ae8e13a6050SHA1: 0a43f6178692e21e40b248e5b3900b16ba844015ANALYSIS DATE: 2022-10-21T17:57:31ZTTPS: T1060, T1112, T1222, T1012, T1120, T1082,...

Malware Analysis – evasion – 27bbd42246a1822d33d2483c915cd660

October 23, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 27bbd42246a1822d33d2483c915cd660SHA1: f4e1809dfd77ee7e5867de325f7ae3c334f4a394ANALYSIS DATE: 2022-10-21T18:26:21ZTTPS: T1082, T1060, T1112, T1004, T1158, T1088,...

Malware Analysis – discovery – 10ee7cce9524e4d2720a32f8fea16010

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 10ee7cce9524e4d2720a32f8fea16010SHA1: d7e89b4db2324da4dec5d020946c2eb92484f4baANALYSIS DATE: 2022-10-21T17:47:15ZTTPS: T1222, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Cobalt Stike Beacon Detected – 194[.]195[.]213[.]31:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]248:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]243:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 42c6a6b16d75378eab14240084ae16f0

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 42c6a6b16d75378eab14240084ae16f0SHA1: 83031b984c12a0cb50d7882a450fe3fa85adc16fANALYSIS DATE: 2022-10-21T18:43:48ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 166a8cec83c5e620cfe57290754a14b6

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 166a8cec83c5e620cfe57290754a14b6SHA1: 302ad1ed3a3518db09a36e0093b9cd188d819874ANALYSIS DATE: 2022-10-21T19:07:27ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 27c0ae51af391cf5d411e6aa790a7660

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 27c0ae51af391cf5d411e6aa790a7660SHA1: 07c2bdca3cebcb1725a76260a151f986ae3b5bb8ANALYSIS DATE: 2022-10-21T18:54:28ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – cryptolocker – 5a4add9136f4bab32c9576ea03133c3e

October 23, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: 5a4add9136f4bab32c9576ea03133c3eSHA1: c72534ef23599b2801da50e2e7e5206c8c57ab1eANALYSIS DATE: 2022-10-21T18:47:47ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 8[.]142[.]11[.]169:8888

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 54[.]64[.]32[.]174:8080

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 143[.]198[.]154[.]179:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]1[.]215[.]252:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – 793c23884b769e0561ac51e543d20cf0

October 23, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 793c23884b769e0561ac51e543d20cf0SHA1: e4aa8deef807ded18edc553aabfedb33a8cdf483ANALYSIS DATE: 2022-10-21T19:24:25ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 62cf2c0bbbbd750f10f2ceada62cba80

October 23, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 62cf2c0bbbbd750f10f2ceada62cba80SHA1: 6c52bfdf172a1762fbf003e346ade681b46b702dANALYSIS DATE: 2022-10-21T19:24:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 7652b0483d37bd356614b3888ab37dc0

October 23, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7652b0483d37bd356614b3888ab37dc0SHA1: e582f54d1ba4baeadc11c1e0d92f1cf4ff3239feANALYSIS DATE: 2022-10-21T19:24:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 7c76a982bb6b0733ebd8ac0b8c3229e0

October 23, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7c76a982bb6b0733ebd8ac0b8c3229e0SHA1: 2709aa4c2e05fc106c31289caae76b04882b2c19ANALYSIS DATE: 2022-10-21T19:24:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 172[.]105[.]14[.]22:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]66[.]151[.]195:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Security

Malware Analysis – djvu – 211ffba6d8fe29258dd740dbe6c19e08

Malware Analysis – ransomware – 0841781ce334fa545cf5ced3df6b019d

Malware Analysis – discovery – 54639aa125db4aebe41299332989f3a0

Malware Analysis – discovery – 13db9c3f1244dc2bdd0dca16dae87466

Malware Analysis – adware – 5bb9e6b6ee66206e848b5ae8e13a6050

Malware Analysis – evasion – 27bbd42246a1822d33d2483c915cd660

Malware Analysis – discovery – 10ee7cce9524e4d2720a32f8fea16010

Cobalt Stike Beacon Detected – 194[.]195[.]213[.]31:80

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]248:80

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]243:443

Malware Analysis – ransomware – 42c6a6b16d75378eab14240084ae16f0

Malware Analysis – discovery – 166a8cec83c5e620cfe57290754a14b6

Malware Analysis – discovery – 27c0ae51af391cf5d411e6aa790a7660

Malware Analysis – cryptolocker – 5a4add9136f4bab32c9576ea03133c3e

Cobalt Stike Beacon Detected – 8[.]142[.]11[.]169:8888

Cobalt Stike Beacon Detected – 54[.]64[.]32[.]174:8080

Cobalt Stike Beacon Detected – 143[.]198[.]154[.]179:80

Cobalt Stike Beacon Detected – 37[.]1[.]215[.]252:443

Malware Analysis – evasion – 793c23884b769e0561ac51e543d20cf0

Malware Analysis – ransomware – 62cf2c0bbbbd750f10f2ceada62cba80

Malware Analysis – evasion – 7652b0483d37bd356614b3888ab37dc0

Malware Analysis – evasion – 7c76a982bb6b0733ebd8ac0b8c3229e0

Cobalt Stike Beacon Detected – 172[.]105[.]14[.]22:80

Cobalt Stike Beacon Detected – 45[.]66[.]151[.]195:443

[PEAR] – Ransomware Victim: Gerson & Schwartz Accident & Injury Lawyers

[SINOBI] – Ransomware Victim: Crown Automotive Sales

Cobalt Strike Beacon Detected – 119[.]91[.]41[.]170:80

Cobalt Strike Beacon Detected – 124[.]220[.]48[.]168:2379

Cobalt Strike Beacon Detected – 81[.]70[.]255[.]195:8080

You may have missed