threatintel

Malware Analysis – infostealer – 49dff06a8b658f63e7e68a38fabd334e

November 27, 2022

Score: 8 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: 49dff06a8b658f63e7e68a38fabd334eSHA1: 0142ab9964cdb1f90347073ea4bda7f53f8a1c6fANALYSIS DATE: 2022-11-26T14:19:14ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – bfafb684e0137b11376328c41d403429

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: bfafb684e0137b11376328c41d403429SHA1: 66372a21ed94d75c54266f25a98d23332066e4ffANALYSIS DATE: 2022-11-26T14:23:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – f8fd5e90f3f1989872f1d9d232cad4b0

November 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: f8fd5e90f3f1989872f1d9d232cad4b0SHA1: 0c5236ef5816c4423536d406f6a2382e25d49643ANALYSIS DATE: 2022-11-26T14:34:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – infostealer – 0b0f9d00040fc45bb833990f737b6dd1

November 27, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: 0b0f9d00040fc45bb833990f737b6dd1SHA1: 2b176dad657900832be9d9d6f6dd99d9e8ff238fANALYSIS DATE: 2022-11-26T14:38:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – banker – b548c6dab2e8e037075e17716eab0c53

November 27, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: b548c6dab2e8e037075e17716eab0c53SHA1: c0382a2d786e4f4a49ca4a92332e6c88daccb48fANALYSIS DATE: 2022-11-26T14:31:24ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – b42c038de240d61952b7bce8cba68305

November 27, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: b42c038de240d61952b7bce8cba68305SHA1: b0dffb37d318e15d5a682bb8821c2d874d6de40dANALYSIS DATE: 2022-11-26T14:33:50ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 9e4c76d5605d5682ab3b1e9c0733e241

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9e4c76d5605d5682ab3b1e9c0733e241SHA1: 31991052c58964b981bdbb3007c758988714a82cANALYSIS DATE: 2022-11-26T14:38:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 0dfa600bdb5f679f29e37d4899c8ab22

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0dfa600bdb5f679f29e37d4899c8ab22SHA1: 43881c094522eb63685e888a6a5b405d49abf894ANALYSIS DATE: 2022-11-26T14:50:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 031fbc489f333795b0099b22e207e044

November 27, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 031fbc489f333795b0099b22e207e044SHA1: 551353f87475ab0eadbc28f9bbc6827b9e8c355aANALYSIS DATE: 2022-11-26T14:41:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 9d5803db2a68dd4cb94121b55726626b

November 27, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9d5803db2a68dd4cb94121b55726626bSHA1: c9737343043b04ac6039df9571707a416e2f5db6ANALYSIS DATE: 2022-11-26T14:38:47ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 04bf83dec81eb1a97e9cbf9a2c66477a

November 27, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 04bf83dec81eb1a97e9cbf9a2c66477aSHA1: 71308c2f4bc770869eee039107e9bd5830e37decANALYSIS DATE: 2022-11-26T15:06:01ZTTPS: T1112, T1060, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – gozi – 9c810ea5eaba030bb86b53fb4eac2d16

November 27, 2022

Score: 10 MALWARE FAMILY: goziTAGS:family:gozi, botnet:1012, banker, isfb, persistence, ransomware, trojanMD5: 9c810ea5eaba030bb86b53fb4eac2d16SHA1: 474886335538cef4ac284212952cbf42ae595413ANALYSIS DATE: 2022-11-26T15:16:15ZTTPS: T1082, T1158, T1060, T1112, T1491...

Malware Analysis – evasion – 29e93a141986236a5e59289b65dd551f

November 27, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 29e93a141986236a5e59289b65dd551fSHA1: ab0ce42f92c6225eeaf662baa5aec80c1a1c8b4aANALYSIS DATE: 2022-11-26T15:41:17ZTTPS: T1107, T1490, T1112, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 7da542b3bb5315c122e615782f69ecbf

November 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7da542b3bb5315c122e615782f69ecbfSHA1: 6ed5e8827874dc1ffb452511f7a0c7a8556fd954ANALYSIS DATE: 2022-11-26T15:22:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 9116620dd952b111a965149e8084d9b7

November 27, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: 9116620dd952b111a965149e8084d9b7SHA1: 3278dc27b7c78531dec44e5d7e54988c38c794adANALYSIS DATE: 2022-11-26T15:47:27ZTTPS: T1082, T1112, T1491 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – discovery – 0ae0a6a9b090ff1645468003f45c4966

November 27, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 0ae0a6a9b090ff1645468003f45c4966SHA1: 08f3983824bf49b1b6ea24b8e60c9ed1b026d0abANALYSIS DATE: 2022-11-27T05:22:32ZTTPS: T1012, T1082, T1112, T1042, T1120, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – amadey – ba7cc918a507055f9e7b5fd0a0910253

November 27, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: ba7cc918a507055f9e7b5fd0a0910253SHA1: 785f6fa2c6464dc2eb1956ee1eac9a57efa514a6ANALYSIS DATE:...

Malware Analysis – evasion – 5e87b99a8a3b341784705537435db706

November 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 5e87b99a8a3b341784705537435db706SHA1: 5d57569e0566897135d3b24b8f7007ab5f16f29cANALYSIS DATE: 2022-11-27T04:41:29ZTTPS: T1088, T1089, T1112, T1004, T1102, T1012, T1082, T1491...

Malware Analysis – ransomware – 18da21337a68b2edf0abedc4a6cb6b0c

November 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 18da21337a68b2edf0abedc4a6cb6b0cSHA1: a42a59f6a2a778ece6cdf55d58ba58243e06a57cANALYSIS DATE: 2022-11-26T07:32:30ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

BlackCat/ALPHV Ransomware Victim: Ta Chen Stainless Pipe Co[.], Ltd

November 27, 2022

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:3079

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:32764

November 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – persistence – ddca4d55e0b4c7e729f2a27721f6f957

November 27, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: ddca4d55e0b4c7e729f2a27721f6f957SHA1: 7e48c9dc3e44db4e7a72eb01f3f57c8866c7946cANALYSIS DATE: 2022-11-26T08:26:20ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 1fc4f7c736f8b793657c5c9f368cfdd0

November 27, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 1fc4f7c736f8b793657c5c9f368cfdd0SHA1: bc39639ad5c168d324e0a097310e554e911c6fc6ANALYSIS DATE: 2022-11-26T07:32:49ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

threatintel

Malware Analysis – infostealer – 49dff06a8b658f63e7e68a38fabd334e

Malware Analysis – ransomware – bfafb684e0137b11376328c41d403429

Malware Analysis – evasion – f8fd5e90f3f1989872f1d9d232cad4b0

Malware Analysis – infostealer – 0b0f9d00040fc45bb833990f737b6dd1

Malware Analysis – banker – b548c6dab2e8e037075e17716eab0c53

Malware Analysis – persistence – b42c038de240d61952b7bce8cba68305

Malware Analysis – ransomware – 9e4c76d5605d5682ab3b1e9c0733e241

Malware Analysis – ransomware – 0dfa600bdb5f679f29e37d4899c8ab22

Malware Analysis – evasion – 031fbc489f333795b0099b22e207e044

Malware Analysis – ransomware – 9d5803db2a68dd4cb94121b55726626b

Malware Analysis – persistence – 04bf83dec81eb1a97e9cbf9a2c66477a

Malware Analysis – gozi – 9c810ea5eaba030bb86b53fb4eac2d16

Malware Analysis – evasion – 29e93a141986236a5e59289b65dd551f

Malware Analysis – ransomware – 7da542b3bb5315c122e615782f69ecbf

Malware Analysis – ransomware – 9116620dd952b111a965149e8084d9b7

Malware Analysis – discovery – 0ae0a6a9b090ff1645468003f45c4966

Malware Analysis – amadey – ba7cc918a507055f9e7b5fd0a0910253

Malware Analysis – evasion – 5e87b99a8a3b341784705537435db706

Malware Analysis – ransomware – 18da21337a68b2edf0abedc4a6cb6b0c

BlackCat/ALPHV Ransomware Victim: Ta Chen Stainless Pipe Co[.], Ltd

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:3079

Cobalt Stike Beacon Detected – 185[.]48[.]86[.]75:32764

Malware Analysis – persistence – ddca4d55e0b4c7e729f2a27721f6f957

Malware Analysis – discovery – 1fc4f7c736f8b793657c5c9f368cfdd0

Cobalt Strike Beacon Detected – 38[.]173[.]19[.]175:8731

Cobalt Strike Beacon Detected – 8[.]219[.]76[.]168:443

Cobalt Strike Beacon Detected – 39[.]104[.]78[.]25:8443

Cobalt Strike Beacon Detected – 8[.]147[.]128[.]54:443

Cobalt Strike Beacon Detected – 43[.]138[.]30[.]109:9999

You may have missed