threatintel

Malware Analysis – ransomware – 7ae8688d48ce06ba6776c08d520b0a2d

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7ae8688d48ce06ba6776c08d520b0a2dSHA1: d979dd7b0db348aacf039c1dcd9c0c89e651653eANALYSIS DATE: 2022-11-27T14:02:40ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – a90dc0ec31368faeb17e50ec9ec79da4

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a90dc0ec31368faeb17e50ec9ec79da4SHA1: c4b52d517fc01b21ff329309235481f5e37177e9ANALYSIS DATE: 2022-11-27T14:04:32ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – dd78d78ddf5aabfcacb166ee072cb7b8

November 28, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: dd78d78ddf5aabfcacb166ee072cb7b8SHA1: 84a1e08ed641dd7a55b19fdca7a305d5dee06077ANALYSIS DATE: 2022-11-27T14:14:40ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – e6c8b69bd7640d1a3faafadf374b36a8

November 28, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e6c8b69bd7640d1a3faafadf374b36a8SHA1: a31a6502eeefb8cd1dbb015a59cf9d4e8cce1918ANALYSIS DATE: 2022-11-27T14:10:14ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 9e212420528ecbd3eac5dce0be2e93d9

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9e212420528ecbd3eac5dce0be2e93d9SHA1: ca91e0b2c37536882babb3f9dd2c493675084bbcANALYSIS DATE: 2022-11-27T14:05:31ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 0653e3f99a42067f97d2bc3c7b1b9a3f

November 28, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0653e3f99a42067f97d2bc3c7b1b9a3fSHA1: a4b811bd6428adde56c9b525ed828092f7e9bd28ANALYSIS DATE: 2022-11-27T14:14:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 2a7042fc955b1fdeee2da166440937b0

November 28, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 2a7042fc955b1fdeee2da166440937b0SHA1: c50d56ec42dd2b837d038428fdec3c623ec2056aANALYSIS DATE: 2022-11-27T14:34:37ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – e1b15aa4f5ff4fb9a3f9ee36135e1f77

November 28, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e1b15aa4f5ff4fb9a3f9ee36135e1f77SHA1: ace7838c6270cdd8dbfc31bc79dd8c12d3f9432aANALYSIS DATE: 2022-11-27T14:21:56ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – banker – c58076591d0bce741254bba2e28cae54

November 28, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: c58076591d0bce741254bba2e28cae54SHA1: bd58b27396336bf8fa25c7c4857bf0b19ddab337ANALYSIS DATE: 2022-11-27T14:21:24ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – banker – a3080596ce363723c8689bcd5f924d1e

November 28, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: a3080596ce363723c8689bcd5f924d1eSHA1: 7de3c7e0268af7f6db9914519b56fc13534a19e2ANALYSIS DATE: 2022-11-27T14:21:17ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 6ffaa831b245336d64579ac03852cbdf

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6ffaa831b245336d64579ac03852cbdfSHA1: 26f8b0e37b1551d808c1e2ad36f079d8651529cbANALYSIS DATE: 2022-11-27T14:38:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – 0f690e45b5cc7cc38609727e682669fa

November 28, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 0f690e45b5cc7cc38609727e682669faSHA1: 5948c0f352f1120190d1ca4eaf5811ff6ee6db83ANALYSIS DATE: 2022-11-27T14:41:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – globeimposter – 350542a03ae2eab2f12f6f61abf925e2

November 28, 2022

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomwareMD5: 350542a03ae2eab2f12f6f61abf925e2SHA1: b943c338607b82fcf72d398ebb317731b5c267c1ANALYSIS DATE: 2022-11-28T09:12:32ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 6700eeb54eed5cba522dcd4aa18c2249

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6700eeb54eed5cba522dcd4aa18c2249SHA1: 0c1e59f8e5892b666cd6d4b8a63db328bf2b3ddcANALYSIS DATE: 2022-11-27T14:41:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – gandcrab – 0009656f547cdab5adf685370b43bbbc

November 28, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 0009656f547cdab5adf685370b43bbbcSHA1: 347f0144d0812e636d95f16c4bbba5bbbf689b89ANALYSIS DATE: 2022-11-28T11:11:11ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 1387797e5314aed354d31cd484b17cab

November 28, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1387797e5314aed354d31cd484b17cabSHA1: 2db7368c890fb59dcf650efc336f878aad9685dcANALYSIS DATE: 2022-11-28T11:09:38ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – eternity – 3e639bb5f41c23fddca94836c44b88a6

November 28, 2022

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: 3e639bb5f41c23fddca94836c44b88a6SHA1: 799699566b60733bfc9429b63d63d6bff1d3225aANALYSIS DATE: 2022-11-28T11:31:34ZTTPS: T1018, T1053, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – amadey – d7f6af2b69482d6bd535c7727555f7c4

November 28, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:systembc, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: d7f6af2b69482d6bd535c7727555f7c4SHA1: d38415a5e022f65802b1d6da7ea3bc30a96e3861ANALYSIS...

threatintel

Malware Analysis – ransomware – 7ae8688d48ce06ba6776c08d520b0a2d

Malware Analysis – ransomware – a90dc0ec31368faeb17e50ec9ec79da4

Malware Analysis – ransomware – dd78d78ddf5aabfcacb166ee072cb7b8

Malware Analysis – ransomware – e6c8b69bd7640d1a3faafadf374b36a8

Malware Analysis – ransomware – 9e212420528ecbd3eac5dce0be2e93d9

Malware Analysis – ransomware – 0653e3f99a42067f97d2bc3c7b1b9a3f

Malware Analysis – evasion – 2a7042fc955b1fdeee2da166440937b0

Malware Analysis – persistence – e1b15aa4f5ff4fb9a3f9ee36135e1f77

Malware Analysis – banker – c58076591d0bce741254bba2e28cae54

Malware Analysis – banker – a3080596ce363723c8689bcd5f924d1e

Malware Analysis – ransomware – 6ffaa831b245336d64579ac03852cbdf

Malware Analysis – banker – 0f690e45b5cc7cc38609727e682669fa

Malware Analysis – globeimposter – 350542a03ae2eab2f12f6f61abf925e2

Malware Analysis – ransomware – 6700eeb54eed5cba522dcd4aa18c2249

Malware Analysis – gandcrab – 0009656f547cdab5adf685370b43bbbc

Malware Analysis – djvu – 1387797e5314aed354d31cd484b17cab

Malware Analysis – eternity – 3e639bb5f41c23fddca94836c44b88a6

Malware Analysis – amadey – d7f6af2b69482d6bd535c7727555f7c4

Cobalt Stike Beacon Detected – 1[.]15[.]141[.]252:6666

Cobalt Stike Beacon Detected – 216[.]120[.]201[.]102:80

Cobalt Stike Beacon Detected – 110[.]41[.]131[.]105:9999

Cobalt Stike Beacon Detected – 42[.]194[.]209[.]253:4321

Cobalt Stike Beacon Detected – 107[.]175[.]142[.]55:9091

Cobalt Stike Beacon Detected – 43[.]139[.]165[.]219:9999

CVE Alert: CVE-2025-8579

CVE Alert: CVE-2025-8577

CVE Alert: CVE-2025-8580

CVE Alert: CVE-2025-8581

CVE Alert: CVE-2025-8578

You may have missed