threatintel

Malware Analysis – chaos – 916ca2273debc1743307562e9b16aabd

November 10, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 916ca2273debc1743307562e9b16aabdSHA1: 240b8e460be45891cd2529620b13afd230c5bc47ANALYSIS DATE: 2022-11-10T05:07:03ZTTPS: T1490, T1059, T1107, T1060, T1112, T1491,...

Malware Analysis – wannacry – c09b457742d6f801f016e53f92759da2

November 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: c09b457742d6f801f016e53f92759da2SHA1: 09fd8aceb7cc15af5f1f86eaaa775e855d3c6f5cANALYSIS DATE: 2022-11-10T05:40:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – e75131f3c4c0a53031df7d659a35cfda

November 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: e75131f3c4c0a53031df7d659a35cfdaSHA1: d75d4509abfba82281b933546897f5f091b087ffANALYSIS DATE: 2022-11-10T05:40:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 4d0f73bef7510e4285435f7c51749591

November 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 4d0f73bef7510e4285435f7c51749591SHA1: cb356572047363ae5f4baf16ba48e82946dec259ANALYSIS DATE: 2022-11-10T05:40:31ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 8d809510a9ae7b8ef6fc6a25e5feaa22

November 10, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8d809510a9ae7b8ef6fc6a25e5feaa22SHA1: eb0888326adbbbdf1537a965c4d26c71549d43f6ANALYSIS DATE: 2022-11-10T05:18:03ZTTPS: T1059, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Cobalt Stike Beacon Detected – 129[.]226[.]92[.]29:80

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 192[.]248[.]151[.]121:8443

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]189[.]4[.]164:443

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]43[.]4[.]39:8009

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]40[.]99[.]143:3333

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]216[.]71[.]230:443

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]134[.]94[.]89:8000

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – teslacrypt – 3dd401698586fc163555e651596621d5

November 10, 2022

Score: 10 MALWARE FAMILY: teslacryptTAGS:family:teslacrypt, persistence, ransomwareMD5: 3dd401698586fc163555e651596621d5SHA1: d17e5d37d45f60df5b8752e5a44a28de1b70da6bANALYSIS DATE: 2022-11-08T16:32:29ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – 0dcd99e0a058eaca50e5e9b8c3c47990

November 10, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 0dcd99e0a058eaca50e5e9b8c3c47990SHA1: 662a312360f5586abb55a6f4adf5a2d2109a07a0ANALYSIS DATE: 2022-11-08T16:17:49ZTTPS: T1112, T1082, T1060, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – xorist – 0fbf8c91afd09939c5ad7edc5ebb3c62

November 10, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 0fbf8c91afd09939c5ad7edc5ebb3c62SHA1: a13a0edaf4b9619d594ea661f210d398bb48ff9eANALYSIS DATE: 2022-11-08T16:17:21ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 28e292e874ee9da1341b55783ffc9c02

November 10, 2022

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, ransomware, spyware, stealerMD5: 28e292e874ee9da1341b55783ffc9c02SHA1: 0148b8e1c49981fc4ddaf6e988b0559161f31b51ANALYSIS DATE: 2022-11-08T16:04:46ZTTPS: T1046, T1082, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA...

Cobalt Stike Beacon Detected – 20[.]73[.]54[.]98:443

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 152[.]136[.]125[.]62:80

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]116:443

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]99[.]93[.]13:80

November 10, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – 4c53a92e0df2605998bd68c62af5e1a7

November 10, 2022

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealerMD5: 4c53a92e0df2605998bd68c62af5e1a7SHA1: c306b4f344174a64be1c805e7da4ee987377cd5aANALYSIS DATE: 2022-11-08T17:11:21ZTTPS: T1490, T1046, T1060, T1112, T1005, T1081,...

Malware Analysis – discovery – 200f0128ad46c7261ca8e23975e5010b

November 10, 2022

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealerMD5: 200f0128ad46c7261ca8e23975e5010bSHA1: ac73ed7794487f0eea8cf4f517f5f9d8b2d7082aANALYSIS DATE: 2022-11-08T17:38:18ZTTPS: T1490, T1046, T1107, T1018, T1005, T1081,...

Malware Analysis – adware – 01202732d53aa438f714aa18a1969b30

November 10, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 01202732d53aa438f714aa18a1969b30SHA1: ae3ffc7b5c00a3288658034586ebeaa848cb9594ANALYSIS DATE: 2022-11-08T17:38:13ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 3d901fb04dead3e603589fee484fb4d5

November 10, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 3d901fb04dead3e603589fee484fb4d5SHA1: 8d2599c9227f7568a1196f3b1f1ac6d26ba4376fANALYSIS DATE: 2022-11-08T16:35:53ZTTPS: T1490, T1112, T1060, T1107, T1082 ScoreMeaningExample10Known badA malware family...

threatintel

Malware Analysis – chaos – 916ca2273debc1743307562e9b16aabd

Malware Analysis – wannacry – c09b457742d6f801f016e53f92759da2

Malware Analysis – wannacry – e75131f3c4c0a53031df7d659a35cfda

Malware Analysis – wannacry – 4d0f73bef7510e4285435f7c51749591

Malware Analysis – ransomware – 8d809510a9ae7b8ef6fc6a25e5feaa22

Cobalt Stike Beacon Detected – 129[.]226[.]92[.]29:80

Cobalt Stike Beacon Detected – 192[.]248[.]151[.]121:8443

Cobalt Stike Beacon Detected – 107[.]189[.]4[.]164:443

Cobalt Stike Beacon Detected – 101[.]43[.]4[.]39:8009

Cobalt Stike Beacon Detected – 121[.]40[.]99[.]143:3333

Cobalt Stike Beacon Detected – 185[.]216[.]71[.]230:443

Cobalt Stike Beacon Detected – 8[.]134[.]94[.]89:8000

Malware Analysis – teslacrypt – 3dd401698586fc163555e651596621d5

Malware Analysis – evasion – 0dcd99e0a058eaca50e5e9b8c3c47990

Malware Analysis – xorist – 0fbf8c91afd09939c5ad7edc5ebb3c62

Malware Analysis – discovery – 28e292e874ee9da1341b55783ffc9c02

Cobalt Stike Beacon Detected – 20[.]73[.]54[.]98:443

Cobalt Stike Beacon Detected – 152[.]136[.]125[.]62:80

Cobalt Stike Beacon Detected – 77[.]73[.]133[.]116:443

Cobalt Stike Beacon Detected – 101[.]99[.]93[.]13:80

Malware Analysis – discovery – 4c53a92e0df2605998bd68c62af5e1a7

Malware Analysis – discovery – 200f0128ad46c7261ca8e23975e5010b

Malware Analysis – adware – 01202732d53aa438f714aa18a1969b30

Malware Analysis – evasion – 3d901fb04dead3e603589fee484fb4d5

SonicWall Products Multiple Vulnerabilities

Apache HTTP Server Multiple Vulnerabilities

CVE Alert: CVE-2024-52976

CVE Alert: CVE-2024-11390

CVE Alert: CVE-2024-52979

You may have missed