threatintel

Malware Analysis – evasion – aa3495ca3c1cbe779ca8049d04b4d434

November 9, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: aa3495ca3c1cbe779ca8049d04b4d434SHA1: 1b4f48e4c705b8be18c859cd5f6450bbdcc13ef0ANALYSIS DATE: 2022-11-08T05:08:56ZTTPS: T1112, T1088, T1089, T1082, T1005, T1081,...

Malware Analysis – evasion – b6c893e8a3a4c772a660ac6f7b348c82

November 9, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: b6c893e8a3a4c772a660ac6f7b348c82SHA1: a70edd3b4fd90dc4e05b7490104d30f46681b112ANALYSIS DATE: 2022-11-08T05:18:55ZTTPS: T1060, T1112, T1158, T1088, T1089, T1082,...

Malware Analysis – persistence – 3595e58306ea531434678f7de9ac5a4e

November 9, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 3595e58306ea531434678f7de9ac5a4eSHA1: 13457ef2059f5cfc10597e50684d7fc9e4277bccANALYSIS DATE: 2022-11-08T05:19:58ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – wannacry – dc976c1f32f5f40e359a5a574ec07b74

November 9, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: dc976c1f32f5f40e359a5a574ec07b74SHA1: e5adaad1be348d7985f2d9a51173f90f954b216eANALYSIS DATE: 2022-11-09T03:00:37ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – teslacrypt – 08ed3a82b107e945abbdf43a03f7bf06

November 9, 2022

Score: 10 MALWARE FAMILY: teslacryptTAGS:family:teslacrypt, persistence, ransomwareMD5: 08ed3a82b107e945abbdf43a03f7bf06SHA1: c1413fe082a18a5b895c9c8ddebb3b684cb22dd8ANALYSIS DATE: 2022-11-08T06:23:09ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – cfaedfe3c6c201ee053d40e63825eefe

November 9, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: cfaedfe3c6c201ee053d40e63825eefeSHA1: 574db9f1e4f682d178d02186aaf21452ce5e858cANALYSIS DATE: 2022-11-08T05:49:54ZTTPS: T1046, T1053, T1018, T1012, T1120, T1082, T1491, T1112, T1107, T1490...

Malware Analysis – djvu – e744f28263ec2303d506f67162dc42d5

November 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e744f28263ec2303d506f67162dc42d5SHA1: d087140326bc0ed09a81d01b001f2d21bb5f0652ANALYSIS DATE: 2022-11-09T04:13:26ZTTPS: T1005, T1081, T1222, T1053,...

Malware Analysis – wannacry – 574303c1af61fdefc03328406c2a2b42

November 9, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 574303c1af61fdefc03328406c2a2b42SHA1: bcb684a157b36f78452d43f208cfe0ebdda728e1ANALYSIS DATE: 2022-11-09T03:00:46ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – phobos – 89ecb17e4dd618967b8d31ce34052c2b

November 9, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 89ecb17e4dd618967b8d31ce34052c2bSHA1: 1c2c6d8809bb77ead595fa41faac6b3861df18aaANALYSIS DATE: 2022-11-09T05:26:03ZTTPS: T1490, T1059, T1107, T1060, T1112, T1005,...

Malware Analysis – amadey – 825333619986c0b941f5f28306408c72

November 9, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:@redlinevip cloud (tg: @fatherofcarders), botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer,...

Malware Analysis – djvu – 5ae0ea398b5498fdcfb3e7633f787102

November 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:vidar, botnet:517, botnet:mario23_10, botnet:slovarik1btc, collection, discovery, infostealer, persistence, ransomware, spyware, stealerMD5: 5ae0ea398b5498fdcfb3e7633f787102SHA1: 4c950560f0a1056ab49446614f1bba0bd3652797ANALYSIS DATE:...

Malware Analysis – phobos – 14214f7904102bb6747d0e31a50c08d3

November 9, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomwareMD5: 14214f7904102bb6747d0e31a50c08d3SHA1: a89974390c9c03495e631f6dca4ae54d044d0941ANALYSIS DATE: 2022-11-09T05:56:51ZTTPS: T1060, T1112, T1031, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – phobos – e8a5392f6773a3cfda23fc0b9ea09749

November 9, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: e8a5392f6773a3cfda23fc0b9ea09749SHA1: 791fa78b31f640830d37ec92bae5dac67b15db9aANALYSIS DATE: 2022-11-09T05:56:34ZTTPS: T1490, T1059, T1107, T1005, T1081, T1060,...

Malware Analysis – djvu – f59f45c6ffccf8090c2b3c03989ccf40

November 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f59f45c6ffccf8090c2b3c03989ccf40SHA1: 8abf5279e634c1a67414314d8b6797cafdb4651bANALYSIS DATE: 2022-11-09T05:36:13ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – evasion – d33273c799f5809c5b8db34ec3273686

November 9, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: d33273c799f5809c5b8db34ec3273686SHA1: 2d1fe993e4bc812a5ca743b7b429a9e68213e712ANALYSIS DATE: 2022-11-07T23:51:40ZTTPS: T1012, T1082, T1060, T1112, T1158, T1088,...

Malware Analysis – evasion – b064703950f97552e4fc974a768abe34

November 9, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: b064703950f97552e4fc974a768abe34SHA1: 7cfac2ac250ef01d4e413531cba855cb6bb14bc7ANALYSIS DATE: 2022-11-07T23:46:16ZTTPS: T1158, T1112, T1088, T1089, T1060, T1082,...

Malware Analysis – evasion – f431ed6f8785a7640c045bf0b7a9ddd6

November 9, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: f431ed6f8785a7640c045bf0b7a9ddd6SHA1: 7b7104e9c31b90b379337c62ef5118a1b44c925aANALYSIS DATE: 2022-11-07T23:33:02ZTTPS: T1005, T1081, T1012, T1082, T1112, T1158,...

Malware Analysis – – 18fc2732394014a8bdf9abaabd8479e4

November 9, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: 18fc2732394014a8bdf9abaabd8479e4SHA1: 9669d98ef38e7b31c2b47d52662b1ba19f881181ANALYSIS DATE: 2022-11-08T00:17:06ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Cobalt Stike Beacon Detected – 129[.]226[.]114[.]137:8080

November 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 879f36bad3f0e5244345d16f14787e91

November 9, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 879f36bad3f0e5244345d16f14787e91SHA1: e0534407f4861516a7dfbd700915cdedc802ca28ANALYSIS DATE: 2022-11-08T21:00:25ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 85541869dac0562262f7ed179a63988a

November 9, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 85541869dac0562262f7ed179a63988aSHA1: 68e663d3cdce9df2ffd16050b68f65a009453aa3ANALYSIS DATE: 2022-11-08T01:17:04ZTTPS: T1112, T1107, T1490, T1005, T1081, T1082, T1060 ScoreMeaningExample10Known...

Malware Analysis – ransomware – 48d064f8cfa1d3a7f6b4cba7cc650e09

November 9, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 48d064f8cfa1d3a7f6b4cba7cc650e09SHA1: f640abaf32949f602cf812b4b2d47d5592b7b931ANALYSIS DATE: 2022-11-08T21:00:30ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – aa9f4ffe8c7083441d072b7e65703bb2

November 9, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: aa9f4ffe8c7083441d072b7e65703bb2SHA1: b33ffbc501c1a83bf91c499f765ef3f1c3f40c5fANALYSIS DATE: 2022-11-08T01:16:54ZTTPS: T1112, T1158, T1088, T1089, T1082, T1005,...

Malware Analysis – persistence – f6ff82c48f719397ad5e405dddc1f6af

November 9, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: f6ff82c48f719397ad5e405dddc1f6afSHA1: 1f6fe7f9492e3e1612f2b7aef27088a468868fe0ANALYSIS DATE: 2022-11-08T21:55:29ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – evasion – aa3495ca3c1cbe779ca8049d04b4d434

Malware Analysis – evasion – b6c893e8a3a4c772a660ac6f7b348c82

Malware Analysis – persistence – 3595e58306ea531434678f7de9ac5a4e

Malware Analysis – wannacry – dc976c1f32f5f40e359a5a574ec07b74

Malware Analysis – teslacrypt – 08ed3a82b107e945abbdf43a03f7bf06

Malware Analysis – discovery – cfaedfe3c6c201ee053d40e63825eefe

Malware Analysis – djvu – e744f28263ec2303d506f67162dc42d5

Malware Analysis – wannacry – 574303c1af61fdefc03328406c2a2b42

Malware Analysis – phobos – 89ecb17e4dd618967b8d31ce34052c2b

Malware Analysis – amadey – 825333619986c0b941f5f28306408c72

Malware Analysis – djvu – 5ae0ea398b5498fdcfb3e7633f787102

Malware Analysis – phobos – 14214f7904102bb6747d0e31a50c08d3

Malware Analysis – phobos – e8a5392f6773a3cfda23fc0b9ea09749

Malware Analysis – djvu – f59f45c6ffccf8090c2b3c03989ccf40

Malware Analysis – evasion – d33273c799f5809c5b8db34ec3273686

Malware Analysis – evasion – b064703950f97552e4fc974a768abe34

Malware Analysis – evasion – f431ed6f8785a7640c045bf0b7a9ddd6

Malware Analysis – – 18fc2732394014a8bdf9abaabd8479e4

Cobalt Stike Beacon Detected – 129[.]226[.]114[.]137:8080

Malware Analysis – ransomware – 879f36bad3f0e5244345d16f14787e91

Malware Analysis – persistence – 85541869dac0562262f7ed179a63988a

Malware Analysis – ransomware – 48d064f8cfa1d3a7f6b4cba7cc650e09

Malware Analysis – evasion – aa9f4ffe8c7083441d072b7e65703bb2

Malware Analysis – persistence – f6ff82c48f719397ad5e405dddc1f6af

[FLOCKER] – Ransomware Victim: G*****n[.]com

[FLOCKER] – Ransomware Victim: H**u[.]i*v[.]tw

CVE Alert: CVE-2024-48916

CVE Alert: CVE-2025-8329

CVE Alert: CVE-2025-50464

You may have missed