Security

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 14baa82b3b48237395b7f0b43927229fSHA1: 99b382b9b239db3a3a0cc34ade673d6071b773d8ANALYSIS DATE: 2022-10-11T08:11:18ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4647bb53eb893013f8c752f2b550ae81SHA1: 5779a312940e1b8dcc587fdf22f94ec220c1db4bANALYSIS DATE: 2022-10-11T08:10:59ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 150[.]158[.]180[.]97:443

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 210[.]212[.]152[.]202:80

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]55[.]227[.]87:8800

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]12[.]200[.]207:80

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

October 11, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 719089f79446e8f6d7e2ba960a2ed96cSHA1: 5047fdd972be0de532409dee8ea72ae2dda2ede8ANALYSIS DATE: 2022-10-11T08:17:02ZTTPS: T1031, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 14baa82b3b48237395b7f0b43927229fSHA1: 99b382b9b239db3a3a0cc34ade673d6071b773d8ANALYSIS DATE: 2022-10-11T08:12:05ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – persistence – b49b434dbfee3b934e8d1fdca785b18b

October 11, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: b49b434dbfee3b934e8d1fdca785b18bSHA1: 16d250980885f9f7d92cd23df590bac5be29e7bdANALYSIS DATE: 2022-10-11T08:16:07ZTTPS: T1060, T1082, T1491, T1112, T1042 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

October 11, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 719089f79446e8f6d7e2ba960a2ed96cSHA1: 5047fdd972be0de532409dee8ea72ae2dda2ede8ANALYSIS DATE: 2022-10-11T08:16:32ZTTPS: T1107, T1490, T1082, T1031, T1112 ScoreMeaningExample10Known badA malware family was...

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]80:443

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 170[.]178[.]217[.]120:8080

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 146[.]70[.]53[.]165:443

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 176[.]113[.]115[.]102:80

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 0cb4753490c6383c0005aa3c025d16c7

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0cb4753490c6383c0005aa3c025d16c7SHA1: 7fd69a77ece673870edff6d18cc49efedadaf366ANALYSIS DATE: 2022-10-11T08:21:06ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – discovery – 69f8758ed98e98659611e7cfbbeddcc0

October 11, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 69f8758ed98e98659611e7cfbbeddcc0SHA1: 2206ad1f11531b07bbbd08eef062844ce8944738ANALYSIS DATE: 2022-10-11T08:21:19ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 63fbbac40a124e5f40fb768acb4df6c1

October 11, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 63fbbac40a124e5f40fb768acb4df6c1SHA1: 90ae3913d6f89f99e5d4baa38133d306e9b1583eANALYSIS DATE: 2022-10-11T08:27:31ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a156800b9afd9e30ffce8aa6e89d6cfb

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a156800b9afd9e30ffce8aa6e89d6cfbSHA1: 7b0769c3164faf45d071a0da7e8fafe0eaf4fc82ANALYSIS DATE: 2022-10-11T08:33:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 32a51d488c8a68eedb7221fc7e7ee196

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 32a51d488c8a68eedb7221fc7e7ee196SHA1: 98a0bef751da37a0bcbc6961ce3a5eaab705f311ANALYSIS DATE: 2022-10-11T09:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – danabot – a156800b9afd9e30ffce8aa6e89d6cfb

October 11, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a156800b9afd9e30ffce8aa6e89d6cfbSHA1: 7b0769c3164faf45d071a0da7e8fafe0eaf4fc82ANALYSIS...

Malware Analysis – smokeloader – 32a51d488c8a68eedb7221fc7e7ee196

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 32a51d488c8a68eedb7221fc7e7ee196SHA1: 98a0bef751da37a0bcbc6961ce3a5eaab705f311ANALYSIS DATE: 2022-10-11T09:05:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7545dc45d86663ee45aff24419cc15ac

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7545dc45d86663ee45aff24419cc15acSHA1: adadfbebd62e1f3890d74200ecd671b713a7e56cANALYSIS DATE: 2022-10-11T08:34:21ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – djvu – 5564c4680da43fb5501cd028b43531f5

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5564c4680da43fb5501cd028b43531f5SHA1: 0e11e3f578c5271423bb9ace237fb2bebe496444ANALYSIS DATE: 2022-10-11T09:48:54ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – smokeloader – 7a14753737a3de00a01d7c0bcfa52230

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7a14753737a3de00a01d7c0bcfa52230SHA1: f55cfee97f76001ceb503809570faaa744886d5aANALYSIS DATE: 2022-10-11T09:32:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

Cobalt Stike Beacon Detected – 150[.]158[.]180[.]97:443

Cobalt Stike Beacon Detected – 210[.]212[.]152[.]202:80

Cobalt Stike Beacon Detected – 106[.]55[.]227[.]87:8800

Cobalt Stike Beacon Detected – 106[.]12[.]200[.]207:80

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

Malware Analysis – persistence – b49b434dbfee3b934e8d1fdca785b18b

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]80:443

Cobalt Stike Beacon Detected – 170[.]178[.]217[.]120:8080

Cobalt Stike Beacon Detected – 146[.]70[.]53[.]165:443

Cobalt Stike Beacon Detected – 176[.]113[.]115[.]102:80

Malware Analysis – djvu – 0cb4753490c6383c0005aa3c025d16c7

Malware Analysis – discovery – 69f8758ed98e98659611e7cfbbeddcc0

Malware Analysis – discovery – 63fbbac40a124e5f40fb768acb4df6c1

Malware Analysis – smokeloader – a156800b9afd9e30ffce8aa6e89d6cfb

Malware Analysis – smokeloader – 32a51d488c8a68eedb7221fc7e7ee196

Malware Analysis – danabot – a156800b9afd9e30ffce8aa6e89d6cfb

Malware Analysis – smokeloader – 32a51d488c8a68eedb7221fc7e7ee196

Malware Analysis – djvu – 7545dc45d86663ee45aff24419cc15ac

Malware Analysis – djvu – 5564c4680da43fb5501cd028b43531f5

Malware Analysis – smokeloader – 7a14753737a3de00a01d7c0bcfa52230

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed