threatintel

Malware Analysis – gandcrab – 0814fa8c2fbd79bce03f5a73190d2eda

July 5, 2023

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 0814fa8c2fbd79bce03f5a73190d2edaSHA1: ef143e018a7da18df22629ab06dd241c81323d30ANALYSIS DATE: 2023-07-05T15:31:32ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – cerber – 13711f7923466b3c6e831d8b3b4eda5f

July 5, 2023

Score: 10 MALWARE FAMILY: cerberTAGS:family:cerber, evasion, ransomware, spyware, stealerMD5: 13711f7923466b3c6e831d8b3b4eda5fSHA1: 25b8eeebdb6f94de6b5da0f3c27e614c7418fb98ANALYSIS DATE: 2023-07-05T15:31:46ZTTPS: T1082, T1005, T1081, T1102, T1012, T1120, T1031,...

Malware Analysis – evasion – 0b4a3558af2c596884001d0cd6313e33

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 0b4a3558af2c596884001d0cd6313e33SHA1: fb35e53664d47e6938acb4e5007acf09e56a014aANALYSIS DATE: 2023-07-05T15:59:45ZTTPS: T1088, T1089, T1112, T1158, T1082, T1005,...

Malware Analysis – gandcrab – 0940c3347b3461802bfc40649cd808b7

July 5, 2023

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 0940c3347b3461802bfc40649cd808b7SHA1: a1e7a0ef70e667bcb534faa457ae137f8c4b1d0eANALYSIS DATE: 2023-07-05T15:41:04ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 0b3240c856646d2e3518ba2aaa74368a

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 0b3240c856646d2e3518ba2aaa74368aSHA1: 3b1bdc07cee2d01d2a6f3503a4c4db68820c10c9ANALYSIS DATE: 2023-07-05T15:59:13ZTTPS: T1012, T1082, T1060, T1112, T1158, T1088,...

Malware Analysis – gandcrab – 0cc0e3f6d287c23367991663fb5bc93b

July 5, 2023

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 0cc0e3f6d287c23367991663fb5bc93bSHA1: d0616c5416cda52556af5347408029ae63df3064ANALYSIS DATE: 2023-07-05T16:12:20ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – gandcrab – 0e02dffc8a773a0b8e04c2e0eca2fd45

July 5, 2023

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 0e02dffc8a773a0b8e04c2e0eca2fd45SHA1: 6bef6a27faf929e71c40fb91611ef70e680bda19ANALYSIS DATE: 2023-07-05T16:20:43ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 0bc67f6328d47abe5fb7d4453a6bf58e

July 5, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 0bc67f6328d47abe5fb7d4453a6bf58eSHA1: 49660b0df3a682aef265ce7b01d0c4843e4f850bANALYSIS DATE: 2023-07-05T16:05:12ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – gandcrab – 0e50e33e730ac0788c4c4bae93691d47

July 5, 2023

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 0e50e33e730ac0788c4c4bae93691d47SHA1: 20a542ee51d9e5f53c0ecbccf5a2728bd131fdc7ANALYSIS DATE: 2023-07-05T16:23:02ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – discovery – 1047c8a31276d92314f1dc9a0f7d1e8b

July 5, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomware, spyware, stealerMD5: 1047c8a31276d92314f1dc9a0f7d1e8bSHA1: 04eb8f21f6aba2b99a1538098938adfe727d770fANALYSIS DATE: 2023-07-05T16:35:13ZTTPS: T1046, T1005, T1081, T1491, T1112, T1107, T1490 ScoreMeaningExample10Known...

Malware Analysis – evasion – 0f2f0bc78dc9205cccae0fb18e006e2b

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 0f2f0bc78dc9205cccae0fb18e006e2bSHA1: 85f4076f153c3dcfc8aeb3c0b24af9bae4554d8eANALYSIS DATE: 2023-07-05T16:29:37ZTTPS: T1112, T1158, T1012, T1082, T1060, T1088,...

Malware Analysis – gandcrab – 0ec504663d148c0103a0a14e4675e991

July 5, 2023

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 0ec504663d148c0103a0a14e4675e991SHA1: 7751792e10db2b09c20851faa493b6d5577f17feANALYSIS DATE: 2023-07-05T16:25:52ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 0fc179c84db1f3fc59598b40d31ceac6

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 0fc179c84db1f3fc59598b40d31ceac6SHA1: 24729f8dae98db58e10968676377e9e630803c0dANALYSIS DATE: 2023-07-05T16:33:12ZTTPS: T1112, T1158, T1088, T1089, T1082, T1012,...

Malware Analysis – evasion – 13cf570832678aac6a68189e056be0b6

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 13cf570832678aac6a68189e056be0b6SHA1: 428356a745844ced1ccdff264515368e13b2df85ANALYSIS DATE: 2023-07-05T17:10:44ZTTPS: T1005, T1081, T1060, T1112, T1088, T1089,...

Malware Analysis – wannacry – 1294c8e038f6cda40a4493e31a8a6393

July 5, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 1294c8e038f6cda40a4493e31a8a6393SHA1: d55d92cf39bb50b3855e7717e1ea0afa057d11fcANALYSIS DATE: 2023-07-05T16:56:22ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – 10baf200cd92f01571dd5ca3a9f05d03

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 10baf200cd92f01571dd5ca3a9f05d03SHA1: 0b728efb0d3b8449770f37fb9905fa8404aa09edANALYSIS DATE: 2023-07-05T16:38:58ZTTPS: T1112, T1158, T1088, T1089, T1082, T1005,...

Malware Analysis – gandcrab – 13774851dc88fed597f5fa60c86530ba

July 5, 2023

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 13774851dc88fed597f5fa60c86530baSHA1: 6500c1c1eadab3cb8aa8358a08573e140e6ea3a6ANALYSIS DATE: 2023-07-05T17:07:44ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 14bb26f732bc75af30b87220cb77defb

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 14bb26f732bc75af30b87220cb77defbSHA1: b5fa848be2c0ae75631ef18e5bcaf1d25391ffe2ANALYSIS DATE: 2023-07-05T17:20:02ZTTPS: T1082, T1060, T1112, T1158, T1088, T1089,...

Malware Analysis – evasion – f4c5f988b9b36bbcd24064fc859af732

July 5, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealerMD5: f4c5f988b9b36bbcd24064fc859af732SHA1: 88f01bf522ef9e512533d2013068bf83dba9b0ddANALYSIS DATE: 2023-07-05T17:42:10ZTTPS: T1060, T1112, T1070, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 14edfa68ae40b618af655036c7fd5a06

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 14edfa68ae40b618af655036c7fd5a06SHA1: 076759512f081b3c5ba3e5b7429a57931569ad3dANALYSIS DATE: 2023-07-05T17:21:14ZTTPS: T1112, T1088, T1089, T1005, T1081, T1060,...

Malware Analysis – evasion – 14f7ebb2257823b211a11aa1fe5f56d2

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 14f7ebb2257823b211a11aa1fe5f56d2SHA1: b5bdf7009c1426113e7856bbd27fda5f1b9eee8fANALYSIS DATE: 2023-07-05T17:21:38ZTTPS: T1112, T1088, T1089, T1082, T1005, T1081,...

Malware Analysis – evasion – 17cd18166f6ce5030b8bf31dcc27dc8f

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 17cd18166f6ce5030b8bf31dcc27dc8fSHA1: 48c7a0f2e5f3ddb7eec996327dc3e2c115704048ANALYSIS DATE: 2023-07-05T17:47:04ZTTPS: T1082, T1005, T1081, T1060, T1112, T1088,...

Malware Analysis – evasion – 181ab682b8a8fbfea63c61542e2a34eb

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojanMD5: 181ab682b8a8fbfea63c61542e2a34ebSHA1: 2197cf2ff2c43dc0b8296a9e4bd7a5005218ff95ANALYSIS DATE: 2023-07-05T17:54:12ZTTPS: T1158, T1112, T1082, T1005, T1081, T1060, T1088,...

Malware Analysis – evasion – 17d1daad3f2ff185d400ae4145c34d3e

July 5, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 17d1daad3f2ff185d400ae4145c34d3eSHA1: abbc9414b569cfa804fc2d5066f5ae85f8b8c070ANALYSIS DATE: 2023-07-05T17:47:22ZTTPS: T1060, T1112, T1158, T1088, T1089, T1082,...

threatintel

Malware Analysis – gandcrab – 0814fa8c2fbd79bce03f5a73190d2eda

Malware Analysis – cerber – 13711f7923466b3c6e831d8b3b4eda5f

Malware Analysis – evasion – 0b4a3558af2c596884001d0cd6313e33

Malware Analysis – gandcrab – 0940c3347b3461802bfc40649cd808b7

Malware Analysis – evasion – 0b3240c856646d2e3518ba2aaa74368a

Malware Analysis – gandcrab – 0cc0e3f6d287c23367991663fb5bc93b

Malware Analysis – gandcrab – 0e02dffc8a773a0b8e04c2e0eca2fd45

Malware Analysis – wannacry – 0bc67f6328d47abe5fb7d4453a6bf58e

Malware Analysis – gandcrab – 0e50e33e730ac0788c4c4bae93691d47

Malware Analysis – discovery – 1047c8a31276d92314f1dc9a0f7d1e8b

Malware Analysis – evasion – 0f2f0bc78dc9205cccae0fb18e006e2b

Malware Analysis – gandcrab – 0ec504663d148c0103a0a14e4675e991

Malware Analysis – evasion – 0fc179c84db1f3fc59598b40d31ceac6

Malware Analysis – evasion – 13cf570832678aac6a68189e056be0b6

Malware Analysis – wannacry – 1294c8e038f6cda40a4493e31a8a6393

Malware Analysis – evasion – 10baf200cd92f01571dd5ca3a9f05d03

Malware Analysis – gandcrab – 13774851dc88fed597f5fa60c86530ba

Malware Analysis – evasion – 14bb26f732bc75af30b87220cb77defb

Malware Analysis – evasion – f4c5f988b9b36bbcd24064fc859af732

Malware Analysis – evasion – 14edfa68ae40b618af655036c7fd5a06

Malware Analysis – evasion – 14f7ebb2257823b211a11aa1fe5f56d2

Malware Analysis – evasion – 17cd18166f6ce5030b8bf31dcc27dc8f

Malware Analysis – evasion – 181ab682b8a8fbfea63c61542e2a34eb

Malware Analysis – evasion – 17d1daad3f2ff185d400ae4145c34d3e

[AKIRA] – Ransomware Victim: BAF Management Consulting

[QILIN] – Ransomware Victim: ProActive Solutions USA

[QILIN] – Ransomware Victim: The Paul Wilkinson Law Firm

[LYNX] – Ransomware Victim: Greta Group

[LYNX] – Ransomware Victim: Victoria Garden

You may have missed