threatintel

Malware Analysis – persistence – 1300732c2ecc5c87640c561678ecca57

May 15, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 1300732c2ecc5c87640c561678ecca57SHA1: 8dd040f529bac7d2e50984446dc4163d3e467d01ANALYSIS DATE: 2023-05-15T15:18:00ZTTPS: T1130, T1112, T1060, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – c835bbc4c4eb718ba0653d7b9a5f4448

May 15, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: c835bbc4c4eb718ba0653d7b9a5f4448SHA1: aad74838886e587fe4fa3c982afa7089fa37a846ANALYSIS DATE: 2023-05-15T15:18:59ZTTPS: T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 8a57ccbdf2dcb09bc1a9d2d35f915d9c

May 15, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, spyware, stealer, wormMD5: 8a57ccbdf2dcb09bc1a9d2d35f915d9cSHA1: 8e6376685135132a39e7ca2be4642dc31e1d5650ANALYSIS DATE: 2023-05-15T15:18:43ZTTPS: T1046, T1158, T1222, T1082, T1005, T1081...

Malware Analysis – persistence – 394be7c9d8275464517ad821e05f2f8d

May 15, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 394be7c9d8275464517ad821e05f2f8dSHA1: f2432754122b798d5c2272e03b57d679ec07cdc7ANALYSIS DATE: 2023-05-15T15:18:12ZTTPS: T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – c2fdfde11d10b0bcd297d499c9c7a697

May 15, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: c2fdfde11d10b0bcd297d499c9c7a697SHA1: 755e1ccf2f93b8987116580253d0c40c93efaecaANALYSIS DATE: 2023-05-15T15:18:55ZTTPS: T1046, T1082, T1158, T1222, T1107,...

Malware Analysis – djvu – 5579d34a9533f3b050cd53498b0f2486

May 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 5579d34a9533f3b050cd53498b0f2486SHA1: d4c413ce8b60ec812328616f6ec1f77f78c19bd1ANALYSIS DATE: 2023-05-15T15:32:15ZTTPS: T1082, T1012, T1053, T1060, T1112, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – wannacry – 8770099822dbafc9758e953329833fa6

May 15, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, wormMD5: 8770099822dbafc9758e953329833fa6SHA1: c4c8eea66b6abfc392f46699831e73ac07c1fc70ANALYSIS DATE: 2023-05-15T16:35:05ZTTPS: T1046, T1112, T1158, T1222, T1012, T1082, T1060,...

Malware Analysis – wannacry – f066dceeee455ba85d1234f7024e329c

May 15, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: f066dceeee455ba85d1234f7024e329cSHA1: 764827d483e28cfe62159a807d5197ad64d9dc13ANALYSIS DATE: 2023-05-15T15:19:13ZTTPS: T1046, T1222, T1112, T1107, T1490,...

Malware Analysis – ransomware – e1ec93bc29802c555f801849d4a90ec8

May 15, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e1ec93bc29802c555f801849d4a90ec8SHA1: f26acf48013ceac53ecbc969e640fb99e26635d8ANALYSIS DATE: 2023-05-15T16:17:40ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – b042f35c249fcb91b84f3bfb89a7c584

May 15, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: b042f35c249fcb91b84f3bfb89a7c584SHA1: a01331293438f0b3b4c836792c78a70df53db3a3ANALYSIS DATE: 2023-05-15T17:08:18ZTTPS: T1490, T1082, T1018, T1112, T1107, T1060, T1491, T1012, T1120...

Malware Analysis – phobos – f76cea55cfa44e913be198fabfbbf8bc

May 15, 2023

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: f76cea55cfa44e913be198fabfbbf8bcSHA1: b5396284576de154380caef6d63b1c6d38b2f05bANALYSIS DATE: 2023-05-15T17:13:32ZTTPS: T1490, T1059, T1107, T1005, T1081, T1012,...

Malware Analysis – smokeloader – f8d947b83f40d8e8f8c23f5d2403b827

May 15, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f8d947b83f40d8e8f8c23f5d2403b827SHA1: 92fdaf5e8317e43ed9fc71d8249db064bbfd0c73ANALYSIS DATE: 2023-05-15T17:05:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 11430f9bdbb02c4e3002377210c0caa2

May 15, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 11430f9bdbb02c4e3002377210c0caa2SHA1: 6a461c4f2487f2fc39a1d059096de661bd691057ANALYSIS DATE: 2023-05-15T17:17:35ZTTPS: T1112, T1012, T1120, T1082, T1107, T1490, T1031, T1562, T1489, T1018...

News

Industrial Cellular Routers at Risk: 11 New Vulnerabilities Expose OT Networks

May 15, 2023

Several security vulnerabilities have been disclosed in cloud management platforms associated with three industrial cellular router vendors that could expose...

Why High Tech Companies Struggle with SaaS Security

May 15, 2023

It's easy to think high-tech companies have a security advantage over other older, more mature industries. Most are unburdened by...

News

New ‘MichaelKors’ Ransomware-as-a-Service Targeting Linux and VMware ESXi Systems

May 15, 2023

A new ransomware-as-service (RaaS) operation called MichaelKors has become the latest file-encrypting malware to target Linux and VMware ESXi systems...

News

Researchers Uncover Powerful Backdoor and Custom Implant in Year-Long Cyber Campaign

May 15, 2023

Government, aviation, education, and telecom sectors located in South and Southeast Asia have come under the radar of a new...

News

News

CLR SqlShell Malware Targets MS SQL Servers for Crypto Mining and Ransomware

May 15, 2023

Poorly managed Microsoft SQL (MS SQL) servers are the target of a new campaign that's designed to propagate a category...

threatintel

Malware Analysis – persistence – 1300732c2ecc5c87640c561678ecca57

Malware Analysis – persistence – c835bbc4c4eb718ba0653d7b9a5f4448

Malware Analysis – wannacry – 8a57ccbdf2dcb09bc1a9d2d35f915d9c

Malware Analysis – persistence – 394be7c9d8275464517ad821e05f2f8d

Malware Analysis – wannacry – c2fdfde11d10b0bcd297d499c9c7a697

Malware Analysis – djvu – 5579d34a9533f3b050cd53498b0f2486

Malware Analysis – wannacry – 8770099822dbafc9758e953329833fa6

Malware Analysis – wannacry – f066dceeee455ba85d1234f7024e329c

Malware Analysis – ransomware – e1ec93bc29802c555f801849d4a90ec8

Malware Analysis – evasion – b042f35c249fcb91b84f3bfb89a7c584

Malware Analysis – phobos – f76cea55cfa44e913be198fabfbbf8bc

Malware Analysis – smokeloader – f8d947b83f40d8e8f8c23f5d2403b827

Malware Analysis – evasion – 11430f9bdbb02c4e3002377210c0caa2

Industrial Cellular Routers at Risk: 11 New Vulnerabilities Expose OT Networks

Why High Tech Companies Struggle with SaaS Security

New ‘MichaelKors’ Ransomware-as-a-Service Targeting Linux and VMware ESXi Systems

Researchers Uncover Powerful Backdoor and Custom Implant in Year-Long Cyber Campaign

New Ransomware Gang RA Group Hits U.S. and South Korean Organizations

LockBit 3.0 Ransomware Victim: troteclaser[.]com

LockBit 3.0 Ransomware Victim: tool-temp[.]net

LockBit 3.0 Ransomware Victim: euskaltel[.]com

LockBit 3.0 Ransomware Victim: pikenursery[.]com

LockBit 3.0 Ransomware Victim: mundo-r[.]com

CLR SqlShell Malware Targets MS SQL Servers for Crypto Mining and Ransomware

CVE Alert: CVE-2025-6248

CVE Alert: CVE-2025-6231

CVE Alert: CVE-2025-6230

CVE Alert: CVE-2025-6232

CVE Alert: CVE-2025-7753

You may have missed