threatintel

Malware Analysis – smokeloader – 145466b3234adf3b9745ea36d0531ec0

February 22, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 145466b3234adf3b9745ea36d0531ec0SHA1: 01a065a2cc04eb82f484e43f34cab6e921178559ANALYSIS DATE: 2023-02-22T11:11:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – octo – 71d5c5dc3b8c5ded7b005155b84e3b16

February 22, 2023

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, evasion, infostealer, ransomware, rat, trojanMD5: 71d5c5dc3b8c5ded7b005155b84e3b16SHA1: a5c267fd84f0594279a0cc4f1c609a61120a5fdbANALYSIS DATE: 2023-02-22T11:10:11ZTTPS: ScoreMeaningExample10Known badA malware family was...

Malware Analysis – smokeloader – f77d72707555a26065e33dc12449fd6f

February 22, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f77d72707555a26065e33dc12449fd6fSHA1: a5ad0c808420aea73737299ba482797959835541ANALYSIS DATE: 2023-02-22T11:15:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

LockBit 3.0 Ransomware Victim: lyonhealy[.]com

February 22, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: treves-group[.]com

February 22, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Malware Analysis – quantum – 1ac3f71feece118a03c9e23af063f6d1

February 22, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 1ac3f71feece118a03c9e23af063f6d1SHA1: bbc3979075e0574e54a5ead497fcba95fcc78fc0ANALYSIS DATE: 2023-02-22T03:06:12ZTTPS: T1158 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 5a9a8e900606307943a468a8868bcf7d

February 22, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5a9a8e900606307943a468a8868bcf7dSHA1: 2fe997248fbc19d2157de62b88ade74ac8768442ANALYSIS DATE: 2023-02-22T03:00:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – quantum – 78f011f6196ab070e05e7e363a0c02f1

February 22, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 78f011f6196ab070e05e7e363a0c02f1SHA1: 8d31d3e523d1e11631d05f01c410340cef780bfcANALYSIS DATE: 2023-02-22T03:33:29ZTTPS: T1158 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – quantum – c53e027bf91d7e8c8da245ccd28279e5

February 22, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: c53e027bf91d7e8c8da245ccd28279e5SHA1: 4d1fb9ab277f997a63cd42fd76467715b67579e4ANALYSIS DATE: 2023-02-22T04:07:31ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – quantum – 47f3e71a1b1eb4a939d5f17639514334

February 22, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 47f3e71a1b1eb4a939d5f17639514334SHA1: d0c6afe81342ee81389864791c67e9b29e2939f2ANALYSIS DATE: 2023-02-22T04:05:47ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – quantum – ee9c6e60027c8ce65003de32d6125914

February 22, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: ee9c6e60027c8ce65003de32d6125914SHA1: 97872dbc8df6d6c4cc6419e81994336503c748f9ANALYSIS DATE: 2023-02-22T03:46:06ZTTPS: T1158 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – quantum – 87940b01f02d85d033dae35f8d01348f

February 22, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 87940b01f02d85d033dae35f8d01348fSHA1: 152dd7098b2b7409669b1a5ba1e997ddeb622734ANALYSIS DATE: 2023-02-22T04:01:52ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 2626279a3e0fa86062f70eb41c454931

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 2626279a3e0fa86062f70eb41c454931SHA1: 7e274a190cb4dbaeba62dbcd6def09f7c1197ad9ANALYSIS DATE: 2023-02-22T04:31:44ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – djvu – 0e27d37229646c4a68d258f19513bab2

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 0e27d37229646c4a68d258f19513bab2SHA1: 868e81e01cfdefebef662003fb1569d1c8634f55ANALYSIS DATE: 2023-02-22T05:35:54ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – 21b2fa42134d031de96e30172badfe1f

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 21b2fa42134d031de96e30172badfe1fSHA1: 1b43a994e943bd0dcb4c37b824908c6d49815450ANALYSIS DATE: 2023-02-22T05:35:08ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – eb3a93b87aeebce36ef2c599a8a6dfbc

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: eb3a93b87aeebce36ef2c599a8a6dfbcSHA1: d8f67ac9a52e9300fbce7d667ea2f3d3e0bf65e0ANALYSIS DATE: 2023-02-22T04:31:20ZTTPS:...

VMware Patches Critical Vulnerability in Carbon Black App Control Product

February 22, 2023

VMware on Tuesday released patches to address a critical security vulnerability affecting its Carbon Black App Control product. Tracked as...

LockBit 3.0 Ransomware Victim: beacontech[.]net

February 22, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: vuu[.]edu

February 22, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – djvu – c0904e41ae1b556e10c96b0bb560c3a3

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c0904e41ae1b556e10c96b0bb560c3a3SHA1: 42f10936c427306bb9dd573d2b8269ea9abd0e06ANALYSIS DATE: 2023-02-21T22:11:42ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – 65265918b765429783ce5fa95a0622a2

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 65265918b765429783ce5fa95a0622a2SHA1: 1d703e95d884410e5877e90607cdaed2153acd27ANALYSIS DATE: 2023-02-21T22:20:06ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – discovery – a8cd74892388fd177dcc73a4ffcc7597

February 22, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, themidaMD5: a8cd74892388fd177dcc73a4ffcc7597SHA1: 1af61835c4e5dc78c93dad7b1352ff45350f1ae2ANALYSIS DATE: 2023-02-21T22:20:27ZTTPS: T1158, T1012, T1120, T1082, T1222 ScoreMeaningExample10Known badA malware...

Cobalt Stike Beacon Detected – 209[.]141[.]36[.]163:80

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 195[.]123[.]241[.]169:443

February 22, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

threatintel

Malware Analysis – smokeloader – 145466b3234adf3b9745ea36d0531ec0

Malware Analysis – octo – 71d5c5dc3b8c5ded7b005155b84e3b16

Malware Analysis – smokeloader – f77d72707555a26065e33dc12449fd6f

LockBit 3.0 Ransomware Victim: lyonhealy[.]com

LockBit 3.0 Ransomware Victim: treves-group[.]com

Malware Analysis – quantum – 1ac3f71feece118a03c9e23af063f6d1

Malware Analysis – ransomware – 5a9a8e900606307943a468a8868bcf7d

Malware Analysis – quantum – 78f011f6196ab070e05e7e363a0c02f1

Malware Analysis – quantum – c53e027bf91d7e8c8da245ccd28279e5

Malware Analysis – quantum – 47f3e71a1b1eb4a939d5f17639514334

Malware Analysis – quantum – ee9c6e60027c8ce65003de32d6125914

Malware Analysis – quantum – 87940b01f02d85d033dae35f8d01348f

Malware Analysis – djvu – 2626279a3e0fa86062f70eb41c454931

Malware Analysis – djvu – 0e27d37229646c4a68d258f19513bab2

Malware Analysis – djvu – 21b2fa42134d031de96e30172badfe1f

Malware Analysis – djvu – eb3a93b87aeebce36ef2c599a8a6dfbc

VMware Patches Critical Vulnerability in Carbon Black App Control Product

LockBit 3.0 Ransomware Victim: beacontech[.]net

LockBit 3.0 Ransomware Victim: vuu[.]edu

Malware Analysis – djvu – c0904e41ae1b556e10c96b0bb560c3a3

Malware Analysis – djvu – 65265918b765429783ce5fa95a0622a2

Malware Analysis – discovery – a8cd74892388fd177dcc73a4ffcc7597

Cobalt Stike Beacon Detected – 209[.]141[.]36[.]163:80

Cobalt Stike Beacon Detected – 195[.]123[.]241[.]169:443

Cobalt Strike Beacon Detected – 38[.]173[.]19[.]175:8731

Cobalt Strike Beacon Detected – 8[.]219[.]76[.]168:443

Cobalt Strike Beacon Detected – 39[.]104[.]78[.]25:8443

Cobalt Strike Beacon Detected – 8[.]147[.]128[.]54:443

Cobalt Strike Beacon Detected – 43[.]138[.]30[.]109:9999

You may have missed