threatintel

Malware Analysis – djvu – 47f913162c41fbbb8d4df6dd8db678b1

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware, trojanMD5: 47f913162c41fbbb8d4df6dd8db678b1SHA1: 67aad17ae47bc054c066cf285a5a0093cc6ee3f9ANALYSIS...

Malware Analysis – smokeloader – fc7f8d916ef462b2625f2d879658c7d7

October 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: fc7f8d916ef462b2625f2d879658c7d7SHA1: 9181dabb0b81f89f30bb43be0723247e9c620b33ANALYSIS DATE: 2022-10-31T10:25:14ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 824ff4f4dee50edcdffa47005b5e94a3

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, trojanMD5: 824ff4f4dee50edcdffa47005b5e94a3SHA1: 928594c20c1d119d3a96620de99c175387bae38aANALYSIS DATE:...

Malware Analysis – smokeloader – 378aa9513d43ab0502ff20063fbf4adf

October 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 378aa9513d43ab0502ff20063fbf4adfSHA1: d3b06d16b1c1bccdc0489f8014893cf33e028729ANALYSIS DATE: 2022-10-31T10:25:18ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Black Basta Ransomware Victim: STECINT_2

October 31, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: BITRON2

October 31, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Empire C2 Detected – 124[.]222[.]44[.]192:7000

October 31, 2022

The Information provided at the time of posting was detected as "Empire C2". Depending on when you are viewing this...

Brute Ratel C4 Detected – 45[.]43[.]2[.]62:443

October 31, 2022

The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...

Malicious dropper apps on Play Store totaled 30.000+ installations

October 31, 2022

ThreatFabric researchers discovered five malicious dropper apps on Google Play Store with more than 130,000 downloads. Researchers at ThreatFabric have...

Malware Analysis – persistence – a35215aa49d53cb99f3037a7ff7e0331

October 31, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a35215aa49d53cb99f3037a7ff7e0331SHA1: 36df38bfd0a451d3a79848c4a388c1b300df1d4dANALYSIS DATE: 2022-10-30T12:53:48ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – a2f6b816f6f40ccd8d99a220071ebc20

October 31, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a2f6b816f6f40ccd8d99a220071ebc20SHA1: 60a9f4ef90facdea62bfed000b7360e169a3b019ANALYSIS DATE: 2022-10-30T12:42:21ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – adware – 84bb2b8233dc0fe26e26a501b9d671d0

October 31, 2022

Score: 9 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 84bb2b8233dc0fe26e26a501b9d671d0SHA1: 97cac0aaa77a44fb2aec9bd3952b2b03d5585396ANALYSIS DATE: 2022-10-30T12:57:55ZTTPS: T1112, T1176, T1060, T1222, T1012, T1120,...

Malware Analysis – persistence – a3b398f475ab038fb838f5f8e54d7faf

October 31, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a3b398f475ab038fb838f5f8e54d7fafSHA1: de81525eeb94f703a53955eb990223014c9186e0ANALYSIS DATE: 2022-10-30T13:28:51ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – a32bf8ae7a27fa0602859e51784a69e5

October 31, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a32bf8ae7a27fa0602859e51784a69e5SHA1: 93c8e0127e390fdb42253daef700e9e2c44a9d67ANALYSIS DATE: 2022-10-30T13:39:59ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – a3746e8404dab53ec357c105f2227690

October 31, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a3746e8404dab53ec357c105f2227690SHA1: 4b744d6410e4fef57ba27cb789c3c1749ce1ef6dANALYSIS DATE: 2022-10-30T13:52:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – 561cb3ccb6be455d0a14c721e69d44b0

October 31, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 561cb3ccb6be455d0a14c721e69d44b0SHA1: 2abeffb41f3e411cd7d3f7631b0634c62dfe7ef6ANALYSIS DATE: 2022-10-30T13:35:05ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 83cd17666ca7aa0901bae1fa645003c0

October 31, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 83cd17666ca7aa0901bae1fa645003c0SHA1: 9a451df76410a2fb4386cfe623ca6e5aa969c49fANALYSIS DATE: 2022-10-30T13:52:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – e178bd591240bb82c86fd462c2746520

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, trojanMD5: e178bd591240bb82c86fd462c2746520SHA1: ef01432f99dd91b77bdcc7945a7b522b25d7e8e1ANALYSIS DATE:...

Malware Analysis – evasion – 93a56654e298dbaf444d94a6a630e2e0

October 31, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 93a56654e298dbaf444d94a6a630e2e0SHA1: a92949bea05c7c09d9cb01578751cb405f2d30d5ANALYSIS DATE: 2022-10-30T13:53:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – a325b22295167b165248d013a5988b50

October 31, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a325b22295167b165248d013a5988b50SHA1: d47e3d0782c223824fb2f14a8abb2c98c5569c42ANALYSIS DATE: 2022-10-30T13:53:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 7a3c34f502556fbd89465e834c612cdf

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, trojanMD5: 7a3c34f502556fbd89465e834c612cdfSHA1: 882fd66dca2614692690e8a1bc64e411948d25eeANALYSIS DATE:...

threatintel

Malware Analysis – djvu – 47f913162c41fbbb8d4df6dd8db678b1

Malware Analysis – smokeloader – fc7f8d916ef462b2625f2d879658c7d7

Malware Analysis – djvu – 824ff4f4dee50edcdffa47005b5e94a3

Malware Analysis – smokeloader – 378aa9513d43ab0502ff20063fbf4adf

Black Basta Ransomware Victim: STECINT_2

Black Basta Ransomware Victim: BITRON2

Empire C2 Detected – 124[.]222[.]44[.]192:7000

Brute Ratel C4 Detected – 45[.]43[.]2[.]62:443

Malicious dropper apps on Play Store totaled 30.000+ installations

Malware Analysis – persistence – a35215aa49d53cb99f3037a7ff7e0331

Malware Analysis – persistence – a2f6b816f6f40ccd8d99a220071ebc20

Malware Analysis – adware – 84bb2b8233dc0fe26e26a501b9d671d0

Malware Analysis – persistence – a3b398f475ab038fb838f5f8e54d7faf

Malware Analysis – persistence – a32bf8ae7a27fa0602859e51784a69e5

Malware Analysis – evasion – a3746e8404dab53ec357c105f2227690

Malware Analysis – persistence – 561cb3ccb6be455d0a14c721e69d44b0

Malware Analysis – evasion – 83cd17666ca7aa0901bae1fa645003c0

Malware Analysis – djvu – e178bd591240bb82c86fd462c2746520

Malware Analysis – evasion – 93a56654e298dbaf444d94a6a630e2e0

Malware Analysis – evasion – a325b22295167b165248d013a5988b50

Malware Analysis – djvu – 7a3c34f502556fbd89465e834c612cdf

Cobalt Stike Beacon Detected – 34[.]126[.]143[.]129:80

Cobalt Stike Beacon Detected – 84[.]32[.]188[.]244:443

Cobalt Stike Beacon Detected – 162[.]14[.]69[.]252:80

Cobalt Strike Beacon Detected – 8[.]219[.]163[.]113:443

Cobalt Strike Beacon Detected – 47[.]120[.]45[.]216:9009

Cobalt Strike Beacon Detected – 43[.]156[.]57[.]179:80

Cobalt Strike Beacon Detected – 47[.]236[.]58[.]201:80

Cobalt Strike Beacon Detected – 101[.]43[.]94[.]35:180

You may have missed