threatintel

Malware Analysis – wannacry – 8f03c4a373bdbeedde6b452c19673b2a

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 8f03c4a373bdbeedde6b452c19673b2aSHA1: 15df6b3dcad94526e50ac57ae07fd2823c7e5d1fANALYSIS DATE: 2022-11-30T12:50:32ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – d890f8c20832d7c4c13a0591dc7e005d

December 2, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: d890f8c20832d7c4c13a0591dc7e005dSHA1: 6b55c8d13d7b23e85b1717790da49df6e6fb88dbANALYSIS DATE: 2022-11-30T12:50:00ZTTPS: T1130, T1112, T1060, T1004, T1491 ScoreMeaningExample10Known badA malware family...

Malware Analysis – wannacry – feae26f17da20dcf2f3b92c1e1384b0c

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: feae26f17da20dcf2f3b92c1e1384b0cSHA1: d58885716ca1a85507ac84e7ce3c86b2633b8867ANALYSIS DATE: 2022-11-30T12:54:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 322b3db73cefcaf6a7a7f43277a572ab

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 322b3db73cefcaf6a7a7f43277a572abSHA1: fd271d9a9ec9a5340f085d4b9790ecc915a21175ANALYSIS DATE: 2022-11-30T12:55:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – bee90d14c6577c4a6c4e635fd1887c83

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: bee90d14c6577c4a6c4e635fd1887c83SHA1: 2b0e108ff1ed5037d1b400fedee80c5932c36f35ANALYSIS DATE: 2022-11-30T12:56:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Pywirt – Python Windows Incident Response Toolkit

December 2, 2022

With this application, it is aimed to accelerate the incident response processes by collecting information in windows operating systems via...

Malware Analysis – gandcrab – 01def9f56c9af2d97800d7366551a2f1

December 2, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, ransomware, spyware, stealerMD5: 01def9f56c9af2d97800d7366551a2f1SHA1: 3845b36222249023360100a1b3a6f40dfd165321ANALYSIS DATE: 2022-11-30T13:03:34ZTTPS: T1012, T1082, T1107, T1490, T1491, T1112, T1120,...

Malware Analysis – wannacry – ecc23cb522f9026997a28c38f5c80d41

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: ecc23cb522f9026997a28c38f5c80d41SHA1: 8db667c16f8309062c91bbf753485bd92c13bf9fANALYSIS DATE: 2022-11-30T12:58:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 48873aa5ecae0c477169eacd4f7f120a

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 48873aa5ecae0c477169eacd4f7f120aSHA1: bde076efc39dd693d2c6e26345f8b74259af3362ANALYSIS DATE: 2022-11-30T12:59:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – de29e686d671cdbc56a3cb5c292835d6

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: de29e686d671cdbc56a3cb5c292835d6SHA1: cfa871df1c513580df5a52c1da565157360dd712ANALYSIS DATE: 2022-11-30T13:15:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 862e9e77d04da0117d7527ee86b6735a

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 862e9e77d04da0117d7527ee86b6735aSHA1: 46ed914abda4a189c508c91c997d6d3f45bf3820ANALYSIS DATE: 2022-11-30T13:10:19ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – c1e802d5ee2b507171e2a88103b0a6aa

December 2, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: c1e802d5ee2b507171e2a88103b0a6aaSHA1: 6f221101b2b22001517746fec6e33b3dc3be3cfaANALYSIS DATE: 2022-11-30T13:05:13ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – wannacry – 94834b208a8ccffe6207673c462d1975

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 94834b208a8ccffe6207673c462d1975SHA1: 9beea19d8c2d5466a47c817267abec15508014aaANALYSIS DATE: 2022-11-30T13:09:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – be9bdee97e6142aeb032bda086b983f7

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: be9bdee97e6142aeb032bda086b983f7SHA1: caacfc64688347238751ca28d3ce6a32c764dd7aANALYSIS DATE: 2022-11-30T13:19:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – bde52e2773d0acb422a7a42ef6824bc5

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: bde52e2773d0acb422a7a42ef6824bc5SHA1: d3ec8332484ffca41295dbd7c6347b7b23a67b4eANALYSIS DATE: 2022-11-30T13:22:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 7464da1d0f2a4869f09f4cbb7a1addb9

December 2, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7464da1d0f2a4869f09f4cbb7a1addb9SHA1: e63ca39e3e5efcc91c245edf4b74d7f45c3c17b2ANALYSIS DATE: 2022-11-30T13:16:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – wannacry – 6633a19602561d359e76a67a008d62e8

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 6633a19602561d359e76a67a008d62e8SHA1: d823708efa36c4fc6f8ec99dfa8a9741f0205de4ANALYSIS DATE: 2022-11-30T13:17:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – b4a0c2ff755856f92f19cb651a61ae80

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: b4a0c2ff755856f92f19cb651a61ae80SHA1: 6937cdafe1e80af4bf90fd0f844e725257b16a08ANALYSIS DATE: 2022-11-30T13:30:17ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 145c6884b6a10468427e955b1a03b94d

December 2, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 145c6884b6a10468427e955b1a03b94dSHA1: 84dadbb0715a9500e4b30ac4b2ba7426d2aac313ANALYSIS DATE: 2022-11-30T13:26:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – wannacry – f27d3943f18548c0f2d572d63e120493

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: f27d3943f18548c0f2d572d63e120493SHA1: f0c965e91bd85b2b551331011c705eb3cc125186ANALYSIS DATE: 2022-11-30T13:27:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 3e1f1ab7eb22b54d451f764377d869ab

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 3e1f1ab7eb22b54d451f764377d869abSHA1: 0ef805454a7aeb92e5be18457fe430f22186fbc4ANALYSIS DATE: 2022-11-30T13:26:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

threatintel

Malware Analysis – wannacry – 8f03c4a373bdbeedde6b452c19673b2a

Malware Analysis – evasion – d890f8c20832d7c4c13a0591dc7e005d

Malware Analysis – wannacry – feae26f17da20dcf2f3b92c1e1384b0c

Malware Analysis – wannacry – 322b3db73cefcaf6a7a7f43277a572ab

Malware Analysis – wannacry – bee90d14c6577c4a6c4e635fd1887c83

Pywirt – Python Windows Incident Response Toolkit

Malware Analysis – gandcrab – 01def9f56c9af2d97800d7366551a2f1

Malware Analysis – wannacry – ecc23cb522f9026997a28c38f5c80d41

Malware Analysis – wannacry – 48873aa5ecae0c477169eacd4f7f120a

Malware Analysis – wannacry – de29e686d671cdbc56a3cb5c292835d6

Malware Analysis – wannacry – 862e9e77d04da0117d7527ee86b6735a

Malware Analysis – evasion – c1e802d5ee2b507171e2a88103b0a6aa

Malware Analysis – wannacry – 94834b208a8ccffe6207673c462d1975

Malware Analysis – wannacry – be9bdee97e6142aeb032bda086b983f7

Malware Analysis – wannacry – bde52e2773d0acb422a7a42ef6824bc5

Malware Analysis – evasion – 7464da1d0f2a4869f09f4cbb7a1addb9

Malware Analysis – wannacry – 6633a19602561d359e76a67a008d62e8

Malware Analysis – wannacry – b4a0c2ff755856f92f19cb651a61ae80

Malware Analysis – evasion – 145c6884b6a10468427e955b1a03b94d

Malware Analysis – wannacry – f27d3943f18548c0f2d572d63e120493

Malware Analysis – wannacry – 3e1f1ab7eb22b54d451f764377d869ab

Cobalt Stike Beacon Detected – 1[.]14[.]107[.]106:8999

Cobalt Stike Beacon Detected – 154[.]204[.]28[.]190:443

Cobalt Stike Beacon Detected – 43[.]138[.]188[.]65:443

[INCRANSOM] – Ransomware Victim: csaas[.]com

[QILIN] – Ransomware Victim: WIBAIE

[KAWA4096] – Ransomware Victim: sbamh[.]org

[INCRANSOM] – Ransomware Victim: nboat[.]com

[INCRANSOM] – Ransomware Victim: dtxstudio[.]com

You may have missed