Security

Malware Analysis – evasion – 62863fbe54bcc384001f52896f78a2c0

October 11, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 62863fbe54bcc384001f52896f78a2c0SHA1: ec9bc172a15e6bb7972bda93b854863cecd91f38ANALYSIS DATE: 2022-10-11T06:56:02ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ad499a24974aff27e4204574bca7b05f

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ad499a24974aff27e4204574bca7b05fSHA1: 2b8246aed7668f94d61ef52a52697981db97ad5fANALYSIS DATE: 2022-10-11T08:01:54ZTTPS: T1082, T1012, T1053, T1005,...

Malware Analysis – evasion – 74e9208acd17c7d1e074f19a8f64d2e6

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 74e9208acd17c7d1e074f19a8f64d2e6SHA1: 64e1007246dc1fa41d448efe2d7ffa7bb873ee8cANALYSIS DATE: 2022-10-11T06:39:26ZTTPS: T1112, T1060, T1158, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: d647220db85f6557e262ada99919e9f2SHA1: 5fceb3f1819a994b22f3f83084ea50e540d9f8e4ANALYSIS DATE: 2022-10-11T08:06:04ZTTPS: T1112, T1082, T1053, T1107, T1490, T1031, T1491, T1089, T1012,...

Malware Analysis – smokeloader – 4a8cef940dbcaaab17be40229f8f09e9

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4a8cef940dbcaaab17be40229f8f09e9SHA1: fbccf3ef94809dae33000b6a15f7780db9bb3925ANALYSIS DATE: 2022-10-11T08:03:33ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: d647220db85f6557e262ada99919e9f2SHA1: 5fceb3f1819a994b22f3f83084ea50e540d9f8e4ANALYSIS DATE: 2022-10-11T08:05:21ZTTPS: T1491, T1112, T1053, T1107, T1490, T1031, T1089, T1082, T1012,...

Malware Analysis – danabot – 4a8cef940dbcaaab17be40229f8f09e9

October 11, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 4a8cef940dbcaaab17be40229f8f09e9SHA1: fbccf3ef94809dae33000b6a15f7780db9bb3925ANALYSIS...

Malware Analysis – djvu – d8eaa6a4796ba5b2bb8ecaa2f9ce3999

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d8eaa6a4796ba5b2bb8ecaa2f9ce3999SHA1: 0cf6a0cc77e2a73eeef82fc434368e9dbea9836dANALYSIS DATE: 2022-10-11T08:09:45ZTTPS: T1005, T1081, T1060, T1112,...

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]90:80

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 14baa82b3b48237395b7f0b43927229fSHA1: 99b382b9b239db3a3a0cc34ade673d6071b773d8ANALYSIS DATE: 2022-10-11T08:11:18ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4647bb53eb893013f8c752f2b550ae81SHA1: 5779a312940e1b8dcc587fdf22f94ec220c1db4bANALYSIS DATE: 2022-10-11T08:10:59ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4647bb53eb893013f8c752f2b550ae81SHA1: 5779a312940e1b8dcc587fdf22f94ec220c1db4bANALYSIS DATE: 2022-10-11T08:11:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 150[.]158[.]180[.]97:443

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 210[.]212[.]152[.]202:80

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]55[.]227[.]87:8800

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]12[.]200[.]207:80

October 11, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 14baa82b3b48237395b7f0b43927229fSHA1: 99b382b9b239db3a3a0cc34ade673d6071b773d8ANALYSIS DATE: 2022-10-11T08:12:05ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – persistence – b49b434dbfee3b934e8d1fdca785b18b

October 11, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: b49b434dbfee3b934e8d1fdca785b18bSHA1: 16d250980885f9f7d92cd23df590bac5be29e7bdANALYSIS DATE: 2022-10-11T08:16:07ZTTPS: T1060, T1082, T1491, T1112, T1042 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

October 11, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 719089f79446e8f6d7e2ba960a2ed96cSHA1: 5047fdd972be0de532409dee8ea72ae2dda2ede8ANALYSIS DATE: 2022-10-11T08:17:02ZTTPS: T1031, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

October 11, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 719089f79446e8f6d7e2ba960a2ed96cSHA1: 5047fdd972be0de532409dee8ea72ae2dda2ede8ANALYSIS DATE: 2022-10-11T08:16:32ZTTPS: T1107, T1490, T1082, T1031, T1112 ScoreMeaningExample10Known badA malware family was...

Security

Malware Analysis – evasion – 62863fbe54bcc384001f52896f78a2c0

Malware Analysis – djvu – ad499a24974aff27e4204574bca7b05f

Malware Analysis – evasion – 74e9208acd17c7d1e074f19a8f64d2e6

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

Malware Analysis – smokeloader – 4a8cef940dbcaaab17be40229f8f09e9

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

Malware Analysis – danabot – 4a8cef940dbcaaab17be40229f8f09e9

Malware Analysis – djvu – d8eaa6a4796ba5b2bb8ecaa2f9ce3999

Cobalt Stike Beacon Detected – 185[.]143[.]223[.]90:80

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

Cobalt Stike Beacon Detected – 150[.]158[.]180[.]97:443

Cobalt Stike Beacon Detected – 210[.]212[.]152[.]202:80

Cobalt Stike Beacon Detected – 106[.]55[.]227[.]87:8800

Cobalt Stike Beacon Detected – 106[.]12[.]200[.]207:80

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

Malware Analysis – persistence – b49b434dbfee3b934e8d1fdca785b18b

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]80:443

Cobalt Stike Beacon Detected – 170[.]178[.]217[.]120:8080

Cobalt Stike Beacon Detected – 146[.]70[.]53[.]165:443

Cobalt Stike Beacon Detected – 176[.]113[.]115[.]102:80

BugCrowd Bug Bounty Disclosure: P3 – Reflected XSS in `type` parameter on nlsp.nasa.gov – Marcel_Malaeb

[AKIRA] – Ransomware Victim: Econo-Pak

[RANSOMHOUSE] – Ransomware Victim: ASKUL

[AKIRA] – Ransomware Victim: RPI Roofing

[AKIRA] – Ransomware Victim: The Gerson

You may have missed