threatintel

Malware Analysis – djvu – da8ae748568d252c27af7457be7a4ab5

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: da8ae748568d252c27af7457be7a4ab5SHA1: 913b2268de16a4294c433f97bbb4439634f7b564ANALYSIS DATE: 2022-10-22T21:48:26ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – – 106bdbb47b30a477321b204108577744

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 106bdbb47b30a477321b204108577744SHA1: b177e0df659779ca1165b8b35cb7e09754129401ANALYSIS DATE: 2022-10-22T21:30:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Daixin Team targets health organizations with ransomware, US agencies warn

October 22, 2022

US government agencies warned that the Daixin Team cybercrime group is actively targeting the U.S. Healthcare and Public Health sector...

Malware Analysis – discovery – 443247892070b27552695efb25cbd370

October 22, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 443247892070b27552695efb25cbd370SHA1: 9994e9ff44bfa117ffe2f73b3f974a639f99d751ANALYSIS DATE: 2022-10-21T13:54:38ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – 7941708f058beca69eaf0f9d7618d020

October 22, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7941708f058beca69eaf0f9d7618d020SHA1: 0be04012482c6df1410db047523524e6b8aa9b8aANALYSIS DATE: 2022-10-21T14:19:14ZTTPS: T1082, T1112, T1060, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – persistence – 62da799689f1fa028572e529a36982a3

October 22, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 62da799689f1fa028572e529a36982a3SHA1: dbf2f865e0d1bab2613015312eaded00cfa60877ANALYSIS DATE: 2022-10-21T14:19:16ZTTPS: T1107, T1490, T1082, T1112, T1060 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – discovery – 1344621b4058158942a763ad534a01d0

October 22, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 1344621b4058158942a763ad534a01d0SHA1: a5577f6bbfdf07f8627a23946ff3147c6840668fANALYSIS DATE: 2022-10-21T13:54:04ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – e6dcc0d19c42acf6f8bc0a5fb295dc71

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: e6dcc0d19c42acf6f8bc0a5fb295dc71SHA1: b932cd7e0c43288444e34c7ad00639ae52b1e865ANALYSIS DATE: 2022-10-22T14:00:25ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – evasion – 13423360b8c1ffb02fac15d4f4c2b261

October 22, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 13423360b8c1ffb02fac15d4f4c2b261SHA1: b7bd5e7f2d7ef49967f921d263251bf2445a1ce8ANALYSIS DATE: 2022-10-21T14:20:10ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 35dddd354540c317a9b131af025fea15

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 35dddd354540c317a9b131af025fea15SHA1: f4077779d53f962c53674957feadc83cd718c124ANALYSIS DATE: 2022-10-22T14:10:44ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – persistence – 115c90fa3782f94e7beb2959903293bc

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 115c90fa3782f94e7beb2959903293bcSHA1: 1667f62eed47dfd608fe8f4b8b74b6a20b00a084ANALYSIS DATE: 2022-10-22T14:00:38ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – evasion – 9aac8706399f0fefe526d057ab9d8fdf

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: 9aac8706399f0fefe526d057ab9d8fdfSHA1: 3f128622b34f674ba42b755a51c26359f1dc093dANALYSIS DATE: 2022-10-22T14:40:17ZTTPS: T1057, T1082, T1053, T1107, T1490, T1112, T1031, T1012, T1120,...

Malware Analysis – persistence – 17c27a27f56d52944388c05f1dec03ec

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 17c27a27f56d52944388c05f1dec03ecSHA1: a3b268525772b10ca5d689ee2c2f4365334118d0ANALYSIS DATE: 2022-10-22T14:40:29ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – evasion – 674e7ee905d24a89af47b53b53ffc23c

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 674e7ee905d24a89af47b53b53ffc23cSHA1: c6b73b882aa1f4d46ec655a5591a28638700856cANALYSIS DATE: 2022-10-22T14:40:35ZTTPS: T1490, T1059, T1107, T1082, T1012, T1120, T1485 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 249d6385dc41bfefaca68f7dfb3abf5c

October 22, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 249d6385dc41bfefaca68f7dfb3abf5cSHA1: 11c38eb4c9e78541d2b8d2ef6b1564db23ffef5aANALYSIS DATE: 2022-10-22T14:32:20ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – a97a2672ce450c7b19b4896a20920c1a

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a97a2672ce450c7b19b4896a20920c1aSHA1: 80da6eacf1bcd363411567fa52087fa0b9fa085eANALYSIS DATE: 2022-10-22T14:50:55ZTTPS: T1053, T1005, T1081, T1060,...

Malware Analysis – persistence – 6445361212623df909ed2eae3f6c3da0

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6445361212623df909ed2eae3f6c3da0SHA1: 68b2e4ce362406d96f4577b857bf71cb1e4ecf65ANALYSIS DATE: 2022-10-22T15:00:40ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – – 5878ad161d87cd34f135096b374ecd74

October 22, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 5878ad161d87cd34f135096b374ecd74SHA1: aff8540b507ff58eaaadafff5e0a0bd241ee6b10ANALYSIS DATE: 2022-10-22T14:42:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 9d8c4e31390d8c425577eb8c485dad30

October 22, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9d8c4e31390d8c425577eb8c485dad30SHA1: 5894425efcd316df81e771caf84f0bf8b96a0251ANALYSIS DATE: 2022-10-22T14:45:04ZTTPS: T1082, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – – 9ece65fbf12f89c9ac55726d98293b57

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 9ece65fbf12f89c9ac55726d98293b57SHA1: 7bc9b3c3b6f494fe6ca825e243f8f8fe4443b1baANALYSIS DATE: 2022-10-22T15:45:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 5e8701f9d6624a53e5e6a67457ca45b2

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5e8701f9d6624a53e5e6a67457ca45b2SHA1: 8b1e95c8ee61b2a685ad936081e6bdd4c7e0b8e1ANALYSIS DATE: 2022-10-22T15:24:08ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – locky – f63462259d9fbe411e276f137bcb74d4

October 22, 2022

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, ransomwareMD5: f63462259d9fbe411e276f137bcb74d4SHA1: 5dc4433eedfa45bfd78ce002f92bd9cd47f30d71ANALYSIS DATE: 2022-10-22T15:43:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – c9489c311cef8e2fd8b25202625f8300

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: c9489c311cef8e2fd8b25202625f8300SHA1: fc8278fc91cfe0adb178db023a05be60da51a877ANALYSIS DATE: 2022-10-22T15:05:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 94d087166651c0020a9e6cc2fdacdc0c

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 94d087166651c0020a9e6cc2fdacdc0cSHA1: 99be22569ba9b1e49d3fd36f65faa6795672fcc0ANALYSIS DATE: 2022-10-22T16:09:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

threatintel

Malware Analysis – djvu – da8ae748568d252c27af7457be7a4ab5

Malware Analysis – – 106bdbb47b30a477321b204108577744

Daixin Team targets health organizations with ransomware, US agencies warn

Malware Analysis – discovery – 443247892070b27552695efb25cbd370

Malware Analysis – persistence – 7941708f058beca69eaf0f9d7618d020

Malware Analysis – persistence – 62da799689f1fa028572e529a36982a3

Malware Analysis – discovery – 1344621b4058158942a763ad534a01d0

Malware Analysis – persistence – e6dcc0d19c42acf6f8bc0a5fb295dc71

Malware Analysis – evasion – 13423360b8c1ffb02fac15d4f4c2b261

Malware Analysis – djvu – 35dddd354540c317a9b131af025fea15

Malware Analysis – persistence – 115c90fa3782f94e7beb2959903293bc

Malware Analysis – evasion – 9aac8706399f0fefe526d057ab9d8fdf

Malware Analysis – persistence – 17c27a27f56d52944388c05f1dec03ec

Malware Analysis – evasion – 674e7ee905d24a89af47b53b53ffc23c

Malware Analysis – ransomware – 249d6385dc41bfefaca68f7dfb3abf5c

Malware Analysis – djvu – a97a2672ce450c7b19b4896a20920c1a

Malware Analysis – persistence – 6445361212623df909ed2eae3f6c3da0

Malware Analysis – – 5878ad161d87cd34f135096b374ecd74

Malware Analysis – ransomware – 9d8c4e31390d8c425577eb8c485dad30

Malware Analysis – – 9ece65fbf12f89c9ac55726d98293b57

Malware Analysis – djvu – 5e8701f9d6624a53e5e6a67457ca45b2

Malware Analysis – locky – f63462259d9fbe411e276f137bcb74d4

Malware Analysis – – c9489c311cef8e2fd8b25202625f8300

Malware Analysis – – 94d087166651c0020a9e6cc2fdacdc0c

Cobalt Strike Beacon Detected – 1[.]15[.]34[.]67:7777

Cobalt Strike Beacon Detected – 39[.]104[.]78[.]25:8443

Cobalt Strike Beacon Detected – 1[.]15[.]25[.]148:9080

Cobalt Strike Beacon Detected – 47[.]245[.]90[.]197:80

Cobalt Strike Beacon Detected – 43[.]163[.]116[.]82:81

You may have missed