threatintel

Malware Analysis – persistence – a68fca7118b49b5cd23a4935961db414

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a68fca7118b49b5cd23a4935961db414SHA1: b012adfbb775b9bdcb97f0f6499cef78c1d164ebANALYSIS DATE: 2022-11-28T06:04:52ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 2653b0e170899c2b5eab42d5c2f618c3

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 2653b0e170899c2b5eab42d5c2f618c3SHA1: 1f6a06110ddbba0a6f752c2ffd37d20670ae59a5ANALYSIS DATE: 2022-11-28T06:10:50ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 89f059a012a6911765ceaf4e3eefd2f8

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 89f059a012a6911765ceaf4e3eefd2f8SHA1: d0aae8d39b153584b3ea8f82b1ccf99ebef6a20cANALYSIS DATE: 2022-11-28T06:05:24ZTTPS: T1060, T1112, T1107, T1490, T1491, T1082, T1005, T1081...

Malware Analysis – persistence – f66262f719ffdae875e374477a46d834

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: f66262f719ffdae875e374477a46d834SHA1: dca006b0432b6b03308834899ab8f1ec485f054fANALYSIS DATE: 2022-11-28T06:16:33ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – dc604cc2ab66e0032438fc9fc5fac14a

November 29, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: dc604cc2ab66e0032438fc9fc5fac14aSHA1: ec8cb465b71bb2996c62b4e61d2f854aa5f2e08aANALYSIS DATE: 2022-11-28T06:15:38ZTTPS: T1060, T1112, T1107, T1490, T1082, T1158, T1088, T1089...

Malware Analysis – persistence – aa9ac393da242ac8b0dc85ee24d667b1

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: aa9ac393da242ac8b0dc85ee24d667b1SHA1: f85621566b73d89b08c3b9d5710a0410c97e3996ANALYSIS DATE: 2022-11-28T06:21:40ZTTPS: T1107, T1490, T1082, T1005, T1081, T1491, T1112, T1060...

Malware Analysis – persistence – be009e5259b220643b1299ee87924c48

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: be009e5259b220643b1299ee87924c48SHA1: 969fc0b582688127aa8cace9307dafb71f997640ANALYSIS DATE: 2022-11-28T06:16:37ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 35dbf14ccd580c19ade8b4378b7ef228

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 35dbf14ccd580c19ade8b4378b7ef228SHA1: 02922d258a6379fb369c99b4a7bba9ebc8786ac4ANALYSIS DATE: 2022-11-28T06:20:06ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 4ce038d79655af6937ffe506cdf53a5f

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4ce038d79655af6937ffe506cdf53a5fSHA1: b299f3e6794de5c7b1bcb98090ce4c5e2ddbc352ANALYSIS DATE: 2022-11-28T06:21:05ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Pycrypt – Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products

November 29, 2022

Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products Important: Make Sure your payload file have all the...

Malware Analysis – persistence – deec2a79f1cfbdc8dced0f68ec908a28

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: deec2a79f1cfbdc8dced0f68ec908a28SHA1: 0baff8fffe6f148f468bb016c28f87966ff761f5ANALYSIS DATE: 2022-11-28T06:21:47ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 7616872b3a200264a8d476db29be2313

November 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 7616872b3a200264a8d476db29be2313SHA1: 2d91b496b2b722ca990483fa9dd786c50bb20a91ANALYSIS DATE: 2022-11-28T06:29:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 2104c98cf906bb7d3a88b7e471e8e316

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 2104c98cf906bb7d3a88b7e471e8e316SHA1: 8964bf3b65661396d4bc31fbd508cf76bfc1dc80ANALYSIS DATE: 2022-11-28T06:25:58ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 6374833fa3cfdee0c008a01cfeac98c0

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6374833fa3cfdee0c008a01cfeac98c0SHA1: a12cd05029145de309cdc28093ec76cfe22d9f90ANALYSIS DATE: 2022-11-28T06:24:37ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 72f2f9e5b2923d6e7bdc80dc573e59cd

November 29, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 72f2f9e5b2923d6e7bdc80dc573e59cdSHA1: 784c224574ebb49815c03e05ef00ccacf7b49ba4ANALYSIS DATE: 2022-11-29T08:58:25ZTTPS: T1082, T1012, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 2c6e6e290972fcd5e556efccfd51f174

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:lege, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware,...

Malware Analysis – discovery – 600e5eaa2e5c37f15d63d190daac4439

November 29, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, ransomware, trojanMD5: 600e5eaa2e5c37f15d63d190daac4439SHA1: ec376db711cfacb70d03de0cfef5238c6ffb3068ANALYSIS DATE: 2022-11-29T08:59:39ZTTPS: T1107, T1490, T1088, T1089, T1112, T1031, T1053,...

Malware Analysis – – ed932fb2639b8675dca13e78939676a6

November 29, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: ed932fb2639b8675dca13e78939676a6SHA1: 541a1ce815384932b807eb9256e2b95184465e7fANALYSIS DATE: 2022-11-29T09:21:05ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 600f9e2655063f0d028a052e876c1027

November 29, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 600f9e2655063f0d028a052e876c1027SHA1: eb5014b5be86c70358642e3ed9cb3501996ea758ANALYSIS DATE: 2022-11-29T10:50:42ZTTPS: T1005, T1081, T1082, T1053,...

Malware Analysis – magniber – c6c0bf2a9734d4825aaf29119f76f192

November 29, 2022

Score: 10 MALWARE FAMILY: magniberTAGS:family:magniber, ransomwareMD5: c6c0bf2a9734d4825aaf29119f76f192SHA1: 11be57cc037eea85dcca2175cdda599faf30dc3bANALYSIS DATE: 2022-11-29T10:47:14ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – octo – 5bc6f74bce69f6b942426e21c69e08f0

November 29, 2022

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, infostealer, ransomware, rat, trojanMD5: 5bc6f74bce69f6b942426e21c69e08f0SHA1: b59d70df1e5d1f2d43708a00e6a97011154956fcANALYSIS DATE: 2022-11-29T09:37:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 5f0281a720551592837f72c25b839254

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 5f0281a720551592837f72c25b839254SHA1: f6dc4d792cbb8552debe304c79e00b49c594fc7bANALYSIS DATE:...

Malware Analysis – ransomware – fb13a3efdbb801aef77603f6aaea272e

November 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: fb13a3efdbb801aef77603f6aaea272eSHA1: 62f526f82da55e5e3bc835d0e3b770b236d5e99dANALYSIS DATE: 2022-11-29T11:01:08ZTTPS: T1012, T1120, T1082, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 0baa60f8c2818424c9a9c1f3cfc42aad

November 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0baa60f8c2818424c9a9c1f3cfc42aadSHA1: 575052a2196cd8f6d3c5b1955fbf5a93dc9b53f9ANALYSIS DATE: 2022-11-29T11:01:10ZTTPS: T1107, T1490, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was...

threatintel

Malware Analysis – persistence – a68fca7118b49b5cd23a4935961db414

Malware Analysis – persistence – 2653b0e170899c2b5eab42d5c2f618c3

Malware Analysis – persistence – 89f059a012a6911765ceaf4e3eefd2f8

Malware Analysis – persistence – f66262f719ffdae875e374477a46d834

Malware Analysis – evasion – dc604cc2ab66e0032438fc9fc5fac14a

Malware Analysis – persistence – aa9ac393da242ac8b0dc85ee24d667b1

Malware Analysis – persistence – be009e5259b220643b1299ee87924c48

Malware Analysis – persistence – 35dbf14ccd580c19ade8b4378b7ef228

Malware Analysis – evasion – 4ce038d79655af6937ffe506cdf53a5f

Pycrypt – Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products

Malware Analysis – persistence – deec2a79f1cfbdc8dced0f68ec908a28

Malware Analysis – – 7616872b3a200264a8d476db29be2313

Malware Analysis – persistence – 2104c98cf906bb7d3a88b7e471e8e316

Malware Analysis – persistence – 6374833fa3cfdee0c008a01cfeac98c0

Malware Analysis – discovery – 72f2f9e5b2923d6e7bdc80dc573e59cd

Malware Analysis – amadey – 2c6e6e290972fcd5e556efccfd51f174

Malware Analysis – discovery – 600e5eaa2e5c37f15d63d190daac4439

Malware Analysis – – ed932fb2639b8675dca13e78939676a6

Malware Analysis – djvu – 600f9e2655063f0d028a052e876c1027

Malware Analysis – magniber – c6c0bf2a9734d4825aaf29119f76f192

Malware Analysis – octo – 5bc6f74bce69f6b942426e21c69e08f0

Malware Analysis – amadey – 5f0281a720551592837f72c25b839254

Malware Analysis – ransomware – fb13a3efdbb801aef77603f6aaea272e

Malware Analysis – ransomware – 0baa60f8c2818424c9a9c1f3cfc42aad

[NIGHTSPIRE] – Ransomware Victim: vratatech

[NIGHTSPIRE] – Ransomware Victim: speedmais

[NIGHTSPIRE] – Ransomware Victim: Brihta

[WARLOCK] – Ransomware Victim: tein[.]co[.]jp

[WARLOCK] – Ransomware Victim: mytune[.]me

You may have missed