threatintel

Malware Analysis – azov – c85b63aa4526b91acc9ad26f2b142688

November 15, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: c85b63aa4526b91acc9ad26f2b142688SHA1: 3adf5f527aa132e874b48a0309f1392f5730430dANALYSIS DATE: 2022-11-15T05:01:13ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – nitro – 1b01b176dcc36b86e657dc05e680b39a

November 15, 2022

Score: 10 MALWARE FAMILY: nitroTAGS:family:nitro, persistence, ransomware, spyware, stealerMD5: 1b01b176dcc36b86e657dc05e680b39aSHA1: 520a2dd58117656709b09444b37682cdccff07efANALYSIS DATE: 2022-11-15T05:30:38ZTTPS: T1060, T1112, T1491, T1005, T1081, T1102 ScoreMeaningExample10Known...

Malware Analysis – djvu – cbdf6a2d83ff8f674a70ec0bbee7e279

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: cbdf6a2d83ff8f674a70ec0bbee7e279SHA1: eafd89bb91656aabaff1d3a3b58e798d85e54767ANALYSIS DATE: 2022-11-15T05:28:50ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – amadey – 556620100652076e0efed4b48a0c7499

November 15, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, botnet:rozena1114, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – – b81672770e0610b00421c8822ed8b1d2

November 15, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: b81672770e0610b00421c8822ed8b1d2SHA1: 9d4c8a7a309957cd9bbf95a1e750cc60760402cbANALYSIS DATE: 2022-11-15T05:19:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 143[.]198[.]93[.]238:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 149[.]28[.]81[.]98:8080

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 13[.]212[.]115[.]80:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]217[.]1[.]26:5000

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 31[.]41[.]244[.]142:80

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 112[.]121[.]168[.]101:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]159[.]142[.]2:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]120[.]14[.]61:80

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 81[.]68[.]227[.]204:6666

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Black Basta Ransomware Victim: Kessing Rechtsanwälte und Fachanwälte in PartGmbB

November 15, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 39[.]108[.]248[.]6:9999

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]16:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 192[.]74[.]250[.]129:9999

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – 8a4cca57b1deb47df31fbb78ba0876a2

November 15, 2022

Cobalt Stike Beacon Detected – 37[.]1[.]215[.]242:443

November 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 19faeca68a25c97e3d76497a3c5fb439

November 15, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 19faeca68a25c97e3d76497a3c5fb439SHA1: 7b15a524a7ff03c2376c2fbd081ae5d4d3c73819ANALYSIS DATE: 2022-11-14T21:34:54ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 4d26c402976d2d7329a24c64407ccaa0

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4d26c402976d2d7329a24c64407ccaa0SHA1: a5fcdc372907966558ffcfd891b5f6d80f569340ANALYSIS DATE: 2022-11-14T22:50:12ZTTPS: T1222, T1012, T1082, T1060,...

Malware Analysis – unluckyware – d7924023e6cb8826e6db9c1bb917ee4e

November 15, 2022

Score: 10 MALWARE FAMILY: unluckywareTAGS:family:unluckyware, persistence, ransomwareMD5: d7924023e6cb8826e6db9c1bb917ee4eSHA1: d3727664988db585b9d632d2888963019b5e6e11ANALYSIS DATE: 2022-11-14T23:13:27ZTTPS: T1491, T1112, T1102, T1012, T1082, T1060, T1130 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – 9b429218f2ed709675849d6fca5e6ff4

November 15, 2022

threatintel

Malware Analysis – azov – c85b63aa4526b91acc9ad26f2b142688

Malware Analysis – nitro – 1b01b176dcc36b86e657dc05e680b39a

Malware Analysis – djvu – cbdf6a2d83ff8f674a70ec0bbee7e279

Malware Analysis – amadey – 556620100652076e0efed4b48a0c7499

Malware Analysis – – b81672770e0610b00421c8822ed8b1d2

Cobalt Stike Beacon Detected – 143[.]198[.]93[.]238:443

Cobalt Stike Beacon Detected – 149[.]28[.]81[.]98:8080

Cobalt Stike Beacon Detected – 13[.]212[.]115[.]80:443

Cobalt Stike Beacon Detected – 185[.]217[.]1[.]26:5000

Cobalt Stike Beacon Detected – 31[.]41[.]244[.]142:80

Cobalt Stike Beacon Detected – 112[.]121[.]168[.]101:443

Cobalt Stike Beacon Detected – 139[.]159[.]142[.]2:443

Cobalt Stike Beacon Detected – 20[.]120[.]14[.]61:80

Cobalt Stike Beacon Detected – 81[.]68[.]227[.]204:6666

Black Basta Ransomware Victim: Kessing Rechtsanwälte und Fachanwälte in PartGmbB

Cobalt Stike Beacon Detected – 39[.]108[.]248[.]6:9999

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]16:443

Cobalt Stike Beacon Detected – 192[.]74[.]250[.]129:9999

Malware Analysis – amadey – 8a4cca57b1deb47df31fbb78ba0876a2

Cobalt Stike Beacon Detected – 37[.]1[.]215[.]242:443

Malware Analysis – smokeloader – 19faeca68a25c97e3d76497a3c5fb439

Malware Analysis – djvu – 4d26c402976d2d7329a24c64407ccaa0

Malware Analysis – unluckyware – d7924023e6cb8826e6db9c1bb917ee4e

Malware Analysis – amadey – 9b429218f2ed709675849d6fca5e6ff4

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

Cobalt Strike Beacon Detected – 106[.]54[.]239[.]134:80

Cobalt Strike Beacon Detected – 81[.]69[.]98[.]230:50010

Cobalt Strike Beacon Detected – 103[.]43[.]18[.]10:80

Cobalt Strike Beacon Detected – 38[.]190[.]198[.]55:80

You may have missed