threatintel

Malware Analysis – play – 2e8897ef38d4abe4861360a4b6e895d5

November 29, 2022

Score: 10 MALWARE FAMILY: playTAGS:family:play, ransomware, spyware, stealerMD5: 2e8897ef38d4abe4861360a4b6e895d5SHA1: f668b1110d8a6b1a3f638fd8a6276a7a1efe18dbANALYSIS DATE: 2022-11-29T17:12:47ZTTPS: T1005, T1081, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

CISA: CISA Releases Seven Industrial Control Systems Advisories

November 29, 2022

CISA Releases Seven Industrial Control Systems Advisories CISA released seven (7) Industrial Control Systems (ICS) advisories on November 29, 2022....

CISA adds Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities Catalog

November 29, 2022

CISA added a critical flaw impacting Oracle Fusion Middleware, tracked as CVE-2021-35587, to its Known Exploited Vulnerabilities Catalog. The U.S. Cybersecurity...

LockBit 3.0 Ransomware Victim: colonialgeneral[.]com

November 29, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Malware Analysis – evasion – 59ef3417d45e5f5c01e9618aa5e98d8c

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 59ef3417d45e5f5c01e9618aa5e98d8cSHA1: b130a6752cd9ca2ba059b90be2f058006467006bANALYSIS DATE: 2022-11-28T05:38:31ZTTPS: T1107, T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 7599d5919745385851e310c31135d0cc

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 7599d5919745385851e310c31135d0ccSHA1: 3c473d1f04329bc2a59d8f363867b7a477c83af4ANALYSIS DATE: 2022-11-28T05:36:38ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – ad1fbf4bd151e7d15210a1825d5f09e4

November 29, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: ad1fbf4bd151e7d15210a1825d5f09e4SHA1: 32f5e56271ad25af3c1ef94df6cf3db010508d8dANALYSIS DATE: 2022-11-28T05:25:56ZTTPS: T1060, T1112, T1012, T1082, T1158, T1088,...

Malware Analysis – persistence – 06b4b16ce0ad5d1be4ab1c30a7785ba0

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 06b4b16ce0ad5d1be4ab1c30a7785ba0SHA1: 830a92afc80440e39dd3259ec6546f21adf89149ANALYSIS DATE: 2022-11-28T05:38:38ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – ad1860ba37160c5cd9c8edfd9a6f244e

November 29, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: ad1860ba37160c5cd9c8edfd9a6f244eSHA1: afbcf0a29389b0dd2c404d3f510d9bad45c25766ANALYSIS DATE: 2022-11-28T05:43:01ZTTPS: T1112, T1012, T1082, T1060, T1158, T1088,...

Malware Analysis – persistence – 1e4e9740b6dfd25244f39aa4bd5321c9

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 1e4e9740b6dfd25244f39aa4bd5321c9SHA1: 19e7e9d26a12a3441ed44e32d7985e829a9acdbcANALYSIS DATE: 2022-11-28T05:43:54ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 56d9e668c269c3af0ef56c1449f4d07c

November 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 56d9e668c269c3af0ef56c1449f4d07cSHA1: 3c9d803e3f03f4390d05cc6d260986006684c725ANALYSIS DATE: 2022-11-28T05:44:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 17255f13e6914fbc1dd9dec40a0f05cd

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 17255f13e6914fbc1dd9dec40a0f05cdSHA1: 69142df7d8539ceec58cd37b5b2ed4197de709edANALYSIS DATE: 2022-11-28T05:41:03ZTTPS: T1107, T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – persistence – baf3947937254c5d2112d879bc059994

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: baf3947937254c5d2112d879bc059994SHA1: 828d6783742e3b6f7b0142b116621a53e848c061ANALYSIS DATE: 2022-11-28T05:47:07ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 9137b1bb5f43a7a81232e08459307f25

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 9137b1bb5f43a7a81232e08459307f25SHA1: d6326244b9ad1ce5aefd9c1e8fd8cbc8efd1b585ANALYSIS DATE: 2022-11-28T05:45:06ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 3d3ad4451fe3dbbf4b65019c45350ebe

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 3d3ad4451fe3dbbf4b65019c45350ebeSHA1: b9ce92343985301e9fb9c9bbba3d7882d4d8c206ANALYSIS DATE: 2022-11-28T05:45:34ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – b19031e17bc0fbe1b2d2c0169afc3c98

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: b19031e17bc0fbe1b2d2c0169afc3c98SHA1: 7d9f905adde04ee646eb54c2e791108ed707ebedANALYSIS DATE: 2022-11-28T05:50:00ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – sodinokibi – 31bcf5daebd27cf8719e45782dc931b0

November 29, 2022

Score: 10 MALWARE FAMILY: sodinokibiTAGS:family:sodinokibi, botnet:7, campaign:3, ransomwareMD5: 31bcf5daebd27cf8719e45782dc931b0SHA1: 8007bf6dbeff8bd8a57ea1a52f946b7013407c10ANALYSIS DATE: 2022-11-28T05:54:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – persistence – ec8f375201e7fc6d1442c6ce573d0727

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: ec8f375201e7fc6d1442c6ce573d0727SHA1: 9943ea8973b7535085b1792414db5cdf6721d398ANALYSIS DATE: 2022-11-28T05:51:34ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – eaf6e654d37346aa43649c6df3f1d113

November 29, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: eaf6e654d37346aa43649c6df3f1d113SHA1: 195ec2ec8c8009b133c07f61dac18c1af0f3d45cANALYSIS DATE: 2022-11-28T05:51:57ZTTPS: T1053, T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – persistence – 9465ee00e3234ff267a50058d159cb07

November 29, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 9465ee00e3234ff267a50058d159cb07SHA1: 088f0370eec1a9b5d8735ef29f0fcd30a43dc11bANALYSIS DATE: 2022-11-28T05:51:55ZTTPS: T1060, T1112, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Karakurt Ransomware Victim: Regulatory Authority for Telecommunications and Posts (ARTP)

November 29, 2022

KARAKURT RANSOMWARE NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Malware Analysis – – 0fb7c8f601dfbefcd3ba68aad2916f23

November 29, 2022

Score: 3 MALWARE FAMILY: TAGS:MD5: 0fb7c8f601dfbefcd3ba68aad2916f23SHA1: 585ac765b1e32029760ce12c8dbc610a155d6f0dANALYSIS DATE: 2022-11-28T05:55:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ctblocker – 1aad30f76693aa8ec2fd2a9314b02125

November 29, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: 1aad30f76693aa8ec2fd2a9314b02125SHA1: a199494ac4f065578323c1058e0f0cd5df563bc2ANALYSIS DATE: 2022-11-28T05:57:21ZTTPS: T1491, T1112, T1107, T1490, T1012, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – a39f7f890e4aa66827afb5511ec8623b

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a39f7f890e4aa66827afb5511ec8623bSHA1: 68bc24e244c7ad17aec4bf7d24b5d76c3c54b3b7ANALYSIS DATE: 2022-11-28T06:00:37ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – play – 2e8897ef38d4abe4861360a4b6e895d5

CISA: CISA Releases Seven Industrial Control Systems Advisories

CISA adds Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities Catalog

LockBit 3.0 Ransomware Victim: colonialgeneral[.]com

Malware Analysis – evasion – 59ef3417d45e5f5c01e9618aa5e98d8c

Malware Analysis – persistence – 7599d5919745385851e310c31135d0cc

Malware Analysis – evasion – ad1fbf4bd151e7d15210a1825d5f09e4

Malware Analysis – persistence – 06b4b16ce0ad5d1be4ab1c30a7785ba0

Malware Analysis – evasion – ad1860ba37160c5cd9c8edfd9a6f244e

Malware Analysis – persistence – 1e4e9740b6dfd25244f39aa4bd5321c9

Malware Analysis – – 56d9e668c269c3af0ef56c1449f4d07c

Malware Analysis – persistence – 17255f13e6914fbc1dd9dec40a0f05cd

Malware Analysis – persistence – baf3947937254c5d2112d879bc059994

Malware Analysis – persistence – 9137b1bb5f43a7a81232e08459307f25

Malware Analysis – persistence – 3d3ad4451fe3dbbf4b65019c45350ebe

Malware Analysis – persistence – b19031e17bc0fbe1b2d2c0169afc3c98

Malware Analysis – sodinokibi – 31bcf5daebd27cf8719e45782dc931b0

Malware Analysis – persistence – ec8f375201e7fc6d1442c6ce573d0727

Malware Analysis – discovery – eaf6e654d37346aa43649c6df3f1d113

Malware Analysis – persistence – 9465ee00e3234ff267a50058d159cb07

Karakurt Ransomware Victim: Regulatory Authority for Telecommunications and Posts (ARTP)

Malware Analysis – – 0fb7c8f601dfbefcd3ba68aad2916f23

Malware Analysis – ctblocker – 1aad30f76693aa8ec2fd2a9314b02125

Malware Analysis – persistence – a39f7f890e4aa66827afb5511ec8623b

[NIGHTSPIRE] – Ransomware Victim: vratatech

[NIGHTSPIRE] – Ransomware Victim: speedmais

[NIGHTSPIRE] – Ransomware Victim: Brihta

[WARLOCK] – Ransomware Victim: tein[.]co[.]jp

[WARLOCK] – Ransomware Victim: mytune[.]me

You may have missed