threatintel

Malware Analysis – chaos – 5907869307f559b670e7acaf1d69cb08

November 8, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealer, upxMD5: 5907869307f559b670e7acaf1d69cb08SHA1: 1af63521c6a3f5d671c8bfc1f1f662894803d5a9ANALYSIS DATE: 2022-11-08T15:40:08ZTTPS: T1082, T1005, T1081, T1130, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – azov – 28097ef38e5b2bbcad21becaa9b232ca

November 8, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: 28097ef38e5b2bbcad21becaa9b232caSHA1: 0daaddbd5e25c88534652819cd8ae3d75955faf3ANALYSIS DATE: 2022-11-08T15:08:39ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 2eabb8109c2e76505ed6dd3b29f3ff49

November 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2eabb8109c2e76505ed6dd3b29f3ff49SHA1: 09323bafbddc678af0d96aa95d5413e52e490ae0ANALYSIS DATE: 2022-11-08T15:50:24ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – discovery – 0f3707bc9fcf18c583a10a72cc811a06

November 8, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 0f3707bc9fcf18c583a10a72cc811a06SHA1: d9f373016a74cc0572287936b00b03ac84607696ANALYSIS DATE: 2022-11-08T16:55:08ZTTPS: T1130, T1112, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – 4a4435077649dd3023b749dc5cca0a0b

November 8, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: 4a4435077649dd3023b749dc5cca0a0bSHA1: 73e4be290763fce226110e02f84f7a3f38b89aa8ANALYSIS DATE: 2022-11-08T16:00:06ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – e12d62a9826a5774ad165bb70b120663

November 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – 7b938bd47d22fb1e51480873bcbbcdb8

November 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7b938bd47d22fb1e51480873bcbbcdb8SHA1: 25729d6a9505e8dbc45ea5b5121dbf1792785ed2ANALYSIS DATE: 2022-11-08T16:51:08ZTTPS: T1005, T1081, T1012, T1082,...

HIVE Ransomware Victim: Cornwell Quality Tools

November 8, 2022

HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

HIVE Ransomware Victim: ROYAL GATEWAY CO[.], LTD

November 8, 2022

HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

HIVE Ransomware Victim: APM Terminals

November 8, 2022

HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Malware Analysis – chaos – 67fbcd1f2553dd915a211f940d14b280

November 8, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, upxMD5: 67fbcd1f2553dd915a211f940d14b280SHA1: 55402cd3435944f038c310f88df01f13cfa3e1a5ANALYSIS DATE: 2022-11-08T17:00:08ZTTPS: T1130, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – adware – 0b30dcf3e2af94c3e3e6e377d904d0d0

November 8, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 0b30dcf3e2af94c3e3e6e377d904d0d0SHA1: e662c515dc57056d0703bafe6d9b3c7c25156b47ANALYSIS DATE: 2022-11-08T17:37:58ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – adware – 0ad4ba6b364996ffc065163089546840

November 8, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 0ad4ba6b364996ffc065163089546840SHA1: ccd32688216e18476d7415e27c5c5750e2ab7a61ANALYSIS DATE: 2022-11-08T17:38:00ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – raccoon – 2c4a9effba41930d4dfd9430cde5eb40

November 8, 2022

Score: 10 MALWARE FAMILY: raccoonTAGS:family:raccoon, family:redline, family:smokeloader, botnet:1020939650_99, botnet:71dfd37ad40a834e3757b044e3efa038, backdoor, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, upxMD5: 2c4a9effba41930d4dfd9430cde5eb40SHA1: 4809f4ae06e32cadf40a6af7a8e129e17c8676f7ANALYSIS...

Malware Analysis – adware – 0a4d6622e3c23f77d81933d9674cfdc0

November 8, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 0a4d6622e3c23f77d81933d9674cfdc0SHA1: c943696e0dca79a61f7a51f2dfbf7c9089fef3acANALYSIS DATE: 2022-11-08T17:38:03ZTTPS: T1060, T1112, T1222, T1176 ScoreMeaningExample10Known badA...

Malware Analysis – adware – 020bff1e60f35caa632b9967043d4ab0

November 8, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 020bff1e60f35caa632b9967043d4ab0SHA1: 60614686aa19453fb10c4aaf92ede5ce297ec551ANALYSIS DATE: 2022-11-08T17:38:05ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – adware – 0834c751f3ef78c0447990a4b34065e0

November 8, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 0834c751f3ef78c0447990a4b34065e0SHA1: 9ebef84b1a1a0b6b565a24a0c7d64fb20099ac84ANALYSIS DATE: 2022-11-08T17:38:11ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – makop – 5bcf1a6a65d8d0d2ad1c2a78935322b5

November 8, 2022

Score: 10 MALWARE FAMILY: makopTAGS:family:makop, ransomware, spyware, stealerMD5: 5bcf1a6a65d8d0d2ad1c2a78935322b5SHA1: c5af15f8170e3840ba756397cb1548fa9489fae9ANALYSIS DATE: 2022-11-08T17:51:03ZTTPS: T1059, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware...

threatintel

Malware Analysis – chaos – 5907869307f559b670e7acaf1d69cb08

Malware Analysis – azov – 28097ef38e5b2bbcad21becaa9b232ca

Malware Analysis – djvu – 2eabb8109c2e76505ed6dd3b29f3ff49

Malware Analysis – discovery – 0f3707bc9fcf18c583a10a72cc811a06

Malware Analysis – chaos – 4a4435077649dd3023b749dc5cca0a0b

Malware Analysis – djvu – e12d62a9826a5774ad165bb70b120663

Malware Analysis – djvu – 7b938bd47d22fb1e51480873bcbbcdb8

HIVE Ransomware Victim: Cornwell Quality Tools

HIVE Ransomware Victim: ROYAL GATEWAY CO[.], LTD

HIVE Ransomware Victim: APM Terminals

Malware Analysis – chaos – 67fbcd1f2553dd915a211f940d14b280

Malware Analysis – adware – 0b30dcf3e2af94c3e3e6e377d904d0d0

Malware Analysis – adware – 0ad4ba6b364996ffc065163089546840

Malware Analysis – raccoon – 2c4a9effba41930d4dfd9430cde5eb40

Malware Analysis – adware – 0a4d6622e3c23f77d81933d9674cfdc0

Malware Analysis – adware – 020bff1e60f35caa632b9967043d4ab0

Malware Analysis – adware – 0834c751f3ef78c0447990a4b34065e0

Malware Analysis – makop – 5bcf1a6a65d8d0d2ad1c2a78935322b5

GGCorp – 2,376,330 breached accounts

Cobalt Stike Beacon Detected – 107[.]189[.]7[.]248:80

Cobalt Stike Beacon Detected – 124[.]71[.]155[.]200:6443

Brute Ratel C4 Detected – 18[.]163[.]6[.]122:80

Medibank confirms ransomware attack impacting 9.7M customers, but doesn’t pay the ransom

US DoJ seizes $3.36B Bitcoin from Silk Road hacker

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed