threatintel

Malware Analysis – persistence – 036985f98b28f4f18b81702fad9ea559

May 11, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 036985f98b28f4f18b81702fad9ea559SHA1: 37c0bbdf96cf562cbad5b488d919bb7c723d2134ANALYSIS DATE: 2023-05-11T15:31:04ZTTPS: T1107, T1490, T1060, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – f269d924c3b0764eb87abf958d5f34cb

May 11, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, bootkit, discovery, persistence, ransomware, spyware, stealer, wormMD5: f269d924c3b0764eb87abf958d5f34cbSHA1: 99be8187cd59e822d0d655e8f0ca86f3962c5fd7ANALYSIS DATE: 2023-05-11T15:24:12ZTTPS: T1158, T1222, T1012, T1082,...

Malware Analysis – banker – 7dfb7a568fad88e7e92da2ce1ac71483

May 11, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 7dfb7a568fad88e7e92da2ce1ac71483SHA1: 993224c563be93bd613cc3d9fca4e08986771803ANALYSIS DATE: 2023-05-11T14:40:57ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – banker – 1678e81602a1666d602895bf7da04af4

May 11, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 1678e81602a1666d602895bf7da04af4SHA1: 37751af55695523307e6fa7aa077178596743dc1ANALYSIS DATE: 2023-05-11T14:40:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 8d9f3e223f8d5e350b87dc0908fee0a5

May 11, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8d9f3e223f8d5e350b87dc0908fee0a5SHA1: 9fe3060e5cbe3a9ab6c3fb3dee40bd6cd385a6f6ANALYSIS DATE: 2023-05-11T15:57:37ZTTPS: T1012, T1120, T1082, T1491, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family...

Malware Analysis – avoslocker – c9f97820c06f85a39359d97489379925

May 11, 2023

Score: 10 MALWARE FAMILY: avoslockerTAGS:family:avoslocker, evasion, ransomwareMD5: c9f97820c06f85a39359d97489379925SHA1: 631206da423a9f5a5b973831e1c7efb84c8e493eANALYSIS DATE: 2023-05-11T15:49:17ZTTPS: T1490, T1491, T1112, T1107, T1012, T1120, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 0efce9fcad0fe1f645c8d162f494ca25

May 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:ef32d425b907146eeb9090dbc9455ab1, discovery, persistence, ransomware, spyware, stealerMD5: 0efce9fcad0fe1f645c8d162f494ca25SHA1: a25395e0b993a88d776c3b44a923289f009d1aa7ANALYSIS DATE: 2023-05-11T15:44:55ZTTPS: T1053, T1012, T1082, T1222,...

Malware Analysis – discovery – b49fe89eedd01c5c4998902c6a988e2c

May 11, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistence, trojanMD5: b49fe89eedd01c5c4998902c6a988e2cSHA1: c0310946c0ad9346486a6c0eb33a8c73dfa63c01ANALYSIS DATE: 2023-05-11T15:55:20ZTTPS: T1012, T1082, T1057, T1004, T1112, T1088, T1089,...

Malware Analysis – djvu – d21574363da46f66ea8a0316cce35a51

May 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:ef32d425b907146eeb9090dbc9455ab1, discovery, persistence, ransomware, spyware, stealerMD5: d21574363da46f66ea8a0316cce35a51SHA1: e95c85709d0469d512cc994d6615056dbe4eaa6dANALYSIS DATE: 2023-05-11T16:18:28ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – amadey – 26c4da738b1017fd4364cfb611294427

May 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 26c4da738b1017fd4364cfb611294427SHA1: 24794b4df7e39b7d181b6283eed85b1c906f4cfbANALYSIS DATE: 2023-05-11T16:34:18ZTTPS:...

Malware Analysis – ransomware – 0c0ebd73cacb79b19dfd95dc3a5019ee

May 11, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0c0ebd73cacb79b19dfd95dc3a5019eeSHA1: ce62969554656e30765ee7eb27a51dd79367392aANALYSIS DATE: 2023-05-11T16:39:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 416ee1715553dfb39896195e1a2b8e98

May 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, trojanMD5: 416ee1715553dfb39896195e1a2b8e98SHA1: 77a1276c6f14df39f7180e1fceee567020fbac39ANALYSIS DATE: 2023-05-11T16:08:57ZTTPS: T1012, T1120, T1082,...

CISA: CISA Releases Fifteen Industrial Control Systems Advisories

May 11, 2023

CISA Releases Fifteen Industrial Control Systems Advisories CISA released fifteen Industrial Control Systems (ICS) advisories on May 11, 2023. These...

News

New APT Group Red Stinger Targets Military and Critical Infrastructure in Eastern Europe

May 11, 2023

A previously undetected advanced persistent threat (APT) actor dubbed Red Stinger has been linked to attacks targeting Eastern Europe since...

News

Spanish Police Takes Down Massive Cybercrime Ring, 40 Arrested

May 11, 2023

The National Police of Spain said it arrested 40 individuals for their alleged involvement in an organized crime gang called...

News

News

Andoryu Botnet Exploits Critical Ruckus Wireless Flaw for Widespread Attack

May 11, 2023

A nascent botnet called Andoryu has been found to exploit a now-patched critical security flaw in the Ruckus Wireless Admin...

threatintel

Malware Analysis – persistence – 036985f98b28f4f18b81702fad9ea559

Malware Analysis – wannacry – f269d924c3b0764eb87abf958d5f34cb

Malware Analysis – banker – 7dfb7a568fad88e7e92da2ce1ac71483

Malware Analysis – banker – 1678e81602a1666d602895bf7da04af4

Malware Analysis – ransomware – 8d9f3e223f8d5e350b87dc0908fee0a5

Malware Analysis – avoslocker – c9f97820c06f85a39359d97489379925

Malware Analysis – djvu – 0efce9fcad0fe1f645c8d162f494ca25

Malware Analysis – discovery – b49fe89eedd01c5c4998902c6a988e2c

Malware Analysis – djvu – d21574363da46f66ea8a0316cce35a51

Malware Analysis – amadey – 26c4da738b1017fd4364cfb611294427

Malware Analysis – ransomware – 0c0ebd73cacb79b19dfd95dc3a5019ee

Malware Analysis – djvu – 416ee1715553dfb39896195e1a2b8e98

CISA: CISA Releases Fifteen Industrial Control Systems Advisories

New APT Group Red Stinger Targets Military and Critical Infrastructure in Eastern Europe

Spanish Police Takes Down Massive Cybercrime Ring, 40 Arrested

Babuk Source Code Sparks 9 Different Ransomware Strains Targeting VMware ESXi Systems

How Attack Surface Management Supports Continuous Threat Exposure Management

Cobalt Stike Beacon Detected – 179[.]60[.]149[.]254:443

Cobalt Stike Beacon Detected – 114[.]132[.]58[.]185:80

Cobalt Stike Beacon Detected – 120[.]78[.]133[.]177:2222

Cobalt Stike Beacon Detected – 23[.]226[.]55[.]69:443

Cobalt Stike Beacon Detected – 193[.]29[.]13[.]206:80

Cobalt Stike Beacon Detected – 101[.]43[.]135[.]44:8000

Andoryu Botnet Exploits Critical Ruckus Wireless Flaw for Widespread Attack

Cobalt Strike Beacon Detected – 47[.]76[.]30[.]15:80

Cobalt Strike Beacon Detected – 52[.]140[.]245[.]31:80

Cobalt Strike Beacon Detected – 120[.]27[.]235[.]78:80

Cobalt Strike Beacon Detected – 8[.]138[.]47[.]245:80

Cobalt Strike Beacon Detected – 158[.]41[.]106[.]139:443

You may have missed