Security

Malware Analysis – evasion – 6f3e67ffe0fae70074d1855a31de58b0

May 11, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6f3e67ffe0fae70074d1855a31de58b0SHA1: 52b3a9ca753f16b7dd7f59a408b1b71cc5f36ae0ANALYSIS DATE: 2023-05-11T14:40:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – 036985f98b28f4f18b81702fad9ea559

May 11, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 036985f98b28f4f18b81702fad9ea559SHA1: 37c0bbdf96cf562cbad5b488d919bb7c723d2134ANALYSIS DATE: 2023-05-11T15:31:04ZTTPS: T1107, T1490, T1060, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – f269d924c3b0764eb87abf958d5f34cb

May 11, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, bootkit, discovery, persistence, ransomware, spyware, stealer, wormMD5: f269d924c3b0764eb87abf958d5f34cbSHA1: 99be8187cd59e822d0d655e8f0ca86f3962c5fd7ANALYSIS DATE: 2023-05-11T15:24:12ZTTPS: T1158, T1222, T1012, T1082,...

Malware Analysis – banker – 7dfb7a568fad88e7e92da2ce1ac71483

May 11, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 7dfb7a568fad88e7e92da2ce1ac71483SHA1: 993224c563be93bd613cc3d9fca4e08986771803ANALYSIS DATE: 2023-05-11T14:40:57ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – banker – 1678e81602a1666d602895bf7da04af4

May 11, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 1678e81602a1666d602895bf7da04af4SHA1: 37751af55695523307e6fa7aa077178596743dc1ANALYSIS DATE: 2023-05-11T14:40:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 8d9f3e223f8d5e350b87dc0908fee0a5

May 11, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8d9f3e223f8d5e350b87dc0908fee0a5SHA1: 9fe3060e5cbe3a9ab6c3fb3dee40bd6cd385a6f6ANALYSIS DATE: 2023-05-11T15:57:37ZTTPS: T1012, T1120, T1082, T1491, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family...

Malware Analysis – avoslocker – c9f97820c06f85a39359d97489379925

May 11, 2023

Score: 10 MALWARE FAMILY: avoslockerTAGS:family:avoslocker, evasion, ransomwareMD5: c9f97820c06f85a39359d97489379925SHA1: 631206da423a9f5a5b973831e1c7efb84c8e493eANALYSIS DATE: 2023-05-11T15:49:17ZTTPS: T1490, T1491, T1112, T1107, T1012, T1120, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 0efce9fcad0fe1f645c8d162f494ca25

May 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:ef32d425b907146eeb9090dbc9455ab1, discovery, persistence, ransomware, spyware, stealerMD5: 0efce9fcad0fe1f645c8d162f494ca25SHA1: a25395e0b993a88d776c3b44a923289f009d1aa7ANALYSIS DATE: 2023-05-11T15:44:55ZTTPS: T1053, T1012, T1082, T1222,...

Malware Analysis – discovery – b49fe89eedd01c5c4998902c6a988e2c

May 11, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistence, trojanMD5: b49fe89eedd01c5c4998902c6a988e2cSHA1: c0310946c0ad9346486a6c0eb33a8c73dfa63c01ANALYSIS DATE: 2023-05-11T15:55:20ZTTPS: T1012, T1082, T1057, T1004, T1112, T1088, T1089,...

Malware Analysis – amadey – 26c4da738b1017fd4364cfb611294427

May 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 26c4da738b1017fd4364cfb611294427SHA1: 24794b4df7e39b7d181b6283eed85b1c906f4cfbANALYSIS DATE: 2023-05-11T16:34:18ZTTPS:...

Malware Analysis – ransomware – 0c0ebd73cacb79b19dfd95dc3a5019ee

May 11, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0c0ebd73cacb79b19dfd95dc3a5019eeSHA1: ce62969554656e30765ee7eb27a51dd79367392aANALYSIS DATE: 2023-05-11T16:39:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 416ee1715553dfb39896195e1a2b8e98

May 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, trojanMD5: 416ee1715553dfb39896195e1a2b8e98SHA1: 77a1276c6f14df39f7180e1fceee567020fbac39ANALYSIS DATE: 2023-05-11T16:08:57ZTTPS: T1012, T1120, T1082,...

Malware Analysis – djvu – d21574363da46f66ea8a0316cce35a51

May 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:ef32d425b907146eeb9090dbc9455ab1, discovery, persistence, ransomware, spyware, stealerMD5: d21574363da46f66ea8a0316cce35a51SHA1: e95c85709d0469d512cc994d6615056dbe4eaa6dANALYSIS DATE: 2023-05-11T16:18:28ZTTPS: T1053, T1005, T1081, T1012,...

Security

Malware Analysis – evasion – 6f3e67ffe0fae70074d1855a31de58b0

Malware Analysis – persistence – 036985f98b28f4f18b81702fad9ea559

Malware Analysis – wannacry – f269d924c3b0764eb87abf958d5f34cb

Malware Analysis – banker – 7dfb7a568fad88e7e92da2ce1ac71483

Malware Analysis – banker – 1678e81602a1666d602895bf7da04af4

Malware Analysis – ransomware – 8d9f3e223f8d5e350b87dc0908fee0a5

Malware Analysis – avoslocker – c9f97820c06f85a39359d97489379925

Malware Analysis – djvu – 0efce9fcad0fe1f645c8d162f494ca25

Malware Analysis – discovery – b49fe89eedd01c5c4998902c6a988e2c

Malware Analysis – amadey – 26c4da738b1017fd4364cfb611294427

Malware Analysis – ransomware – 0c0ebd73cacb79b19dfd95dc3a5019ee

Malware Analysis – djvu – 416ee1715553dfb39896195e1a2b8e98

Malware Analysis – djvu – d21574363da46f66ea8a0316cce35a51

CISA: CISA Releases Fifteen Industrial Control Systems Advisories

Cobalt Stike Beacon Detected – 179[.]60[.]149[.]254:443

Cobalt Stike Beacon Detected – 114[.]132[.]58[.]185:80

Cobalt Stike Beacon Detected – 120[.]78[.]133[.]177:2222

Cobalt Stike Beacon Detected – 23[.]226[.]55[.]69:443

Cobalt Stike Beacon Detected – 193[.]29[.]13[.]206:80

Cobalt Stike Beacon Detected – 101[.]43[.]135[.]44:8000

CISA: CISA Urges Organizations to Incorporate the FCC Covered List Into Risk Management Plans

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA Requests for Comment on Secure Software Self-Attestation Form

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed