threatintel

Malware Analysis – smokeloader – 11561983e23e2633aaceb72caa4012ca

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 11561983e23e2633aaceb72caa4012caSHA1: ed56a045ba5ed331c24b297d9d3c618313ecb63aANALYSIS DATE: 2023-05-07T06:48:30ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 2e0df3db9d17ecd468164e82a5dce8fd

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2e0df3db9d17ecd468164e82a5dce8fdSHA1: 9e15d3d9061102544db4f939518db2b7c689e17dANALYSIS DATE: 2023-05-07T06:40:51ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a246ea905cbe71069881a834e9c00906

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a246ea905cbe71069881a834e9c00906SHA1: 90dc98abfcfd87a267b4af8fe9a0c7de66a9e815ANALYSIS DATE: 2023-05-07T06:48:57ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 6685c0985b2978f83376519abe42a3a0

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6685c0985b2978f83376519abe42a3a0SHA1: e63a88f6bf1f942aa03100ef615b01e5c8c8ebe6ANALYSIS DATE: 2023-05-07T06:49:35ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a3a7a7f3f4bbc4835f8ac96635434f3b

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a3a7a7f3f4bbc4835f8ac96635434f3bSHA1: 72b800b58a7a41eb892fc0af243dcfdd3c20a5ccANALYSIS DATE: 2023-05-07T06:53:23ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 461d6a95c78bf16d6c87b1a52e62a7db

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 461d6a95c78bf16d6c87b1a52e62a7dbSHA1: 905aa67c72110b33903d5f96d3c15c1006dc98a9ANALYSIS DATE: 2023-05-07T15:21:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 69d7da66b26f3fadf4b24c25afa3aa1d

May 7, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 69d7da66b26f3fadf4b24c25afa3aa1dSHA1: 21935ccf77a975f7360346653ea099ab2bc94b55ANALYSIS DATE: 2023-05-07T15:58:12ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 58681a17b88689ca140b9d4c6f05f661

May 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 58681a17b88689ca140b9d4c6f05f661SHA1: d0c63bcee04b55ca873ac41fb5ae7fc192954e5bANALYSIS DATE: 2023-05-07T16:27:31ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – amadey – a43386ae734f0f09d4930dc1192d5d8c

May 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: a43386ae734f0f09d4930dc1192d5d8cSHA1: 025ccc60022aa83f209a1afb9b5954a31df05da6ANALYSIS DATE: 2023-05-07T16:36:34ZTTPS:...

Malware Analysis – amadey – 5c37c783b72099932182cb19a370d67f

May 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, trojanMD5: 5c37c783b72099932182cb19a370d67fSHA1: cb93a67bc5dc5ac05cbe84cec2ce0fb2e5d93fcaANALYSIS DATE: 2023-05-07T17:00:34ZTTPS: T1222, T1060,...

Malware Analysis – evasion – 24c77144b5f15092fe61bbbb69b4114f

May 7, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 24c77144b5f15092fe61bbbb69b4114fSHA1: 5121a20a765cb6f73d6b8ac97cdf9f6a5ae36346ANALYSIS DATE: 2023-05-07T17:17:08ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – ce55fc139e9f28446e46a96444c3b900

May 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: ce55fc139e9f28446e46a96444c3b900SHA1: cdc015e0f8a3e69f145947685025905db3023ba6ANALYSIS DATE: 2023-05-07T17:06:31ZTTPS: T1060, T1112, T1222, T1082, T1012, T1053 ScoreMeaningExample10Known badA...

threatintel

Malware Analysis – smokeloader – 11561983e23e2633aaceb72caa4012ca

Malware Analysis – smokeloader – 2e0df3db9d17ecd468164e82a5dce8fd

Malware Analysis – smokeloader – a246ea905cbe71069881a834e9c00906

Malware Analysis – smokeloader – 6685c0985b2978f83376519abe42a3a0

Malware Analysis – smokeloader – a3a7a7f3f4bbc4835f8ac96635434f3b

Malware Analysis – smokeloader – 461d6a95c78bf16d6c87b1a52e62a7db

Malware Analysis – – 69d7da66b26f3fadf4b24c25afa3aa1d

Malware Analysis – djvu – 58681a17b88689ca140b9d4c6f05f661

Malware Analysis – amadey – a43386ae734f0f09d4930dc1192d5d8c

Malware Analysis – amadey – 5c37c783b72099932182cb19a370d67f

Malware Analysis – evasion – 24c77144b5f15092fe61bbbb69b4114f

Malware Analysis – djvu – ce55fc139e9f28446e46a96444c3b900

LockBit 3.0 Ransomware Victim: marshallconstruction[.]co[.]uk

Cobalt Stike Beacon Detected – 103[.]27[.]186[.]74:2087

Cobalt Stike Beacon Detected – 114[.]132[.]150[.]96:8099

Cobalt Stike Beacon Detected – 43[.]138[.]111[.]78:80

Cobalt Stike Beacon Detected – 47[.]92[.]128[.]8:443

Cobalt Stike Beacon Detected – 182[.]160[.]11[.]134:443

Cobalt Stike Beacon Detected – 118[.]100[.]230[.]147:443

Cobalt Stike Beacon Detected – 101[.]43[.]156[.]246:443

Cobalt Stike Beacon Detected – 5[.]188[.]86[.]206:443

Cobalt Stike Beacon Detected – 139[.]199[.]3[.]55:80

New PaperCut RCE exploit created that bypasses existing detections

Twitter says ‘security incident’ exposed private Circle tweets

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed