threatintel

Malware Analysis – evasion – 1b038e5617f685a71e6100071c469d30

November 29, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1b038e5617f685a71e6100071c469d30SHA1: 308c751f9ac5d628f17be7fe74ef69944ac412f2ANALYSIS DATE: 2022-11-27T22:45:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 9995dffe2ee432e7135b37c93ef0661f

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9995dffe2ee432e7135b37c93ef0661fSHA1: 726be2ace4a8677f4044c9f9125cf674eb12d0fcANALYSIS DATE: 2022-11-27T22:47:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – fc0956357b92f4c0db8817ccec0587cd

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: fc0956357b92f4c0db8817ccec0587cdSHA1: b3ced3aa100ab5ffb86ecc003bafb479e8073482ANALYSIS DATE: 2022-11-27T22:48:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 291c6983919cf96defb04dc705d71b80

November 29, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 291c6983919cf96defb04dc705d71b80SHA1: ecaef7540497fadef77d80542a7633e2e7422bb8ANALYSIS DATE: 2022-11-27T22:50:28ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 58db33d73a9407d09b03bb649d41069a

November 29, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 58db33d73a9407d09b03bb649d41069aSHA1: 897a0a7878a9a573ed52fa5c7546a9f068151944ANALYSIS DATE: 2022-11-27T22:55:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – f7a4cd5f0ccd2170beaff3d99e75f86d

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: f7a4cd5f0ccd2170beaff3d99e75f86dSHA1: 2859320404113b17455db1ede06390cb2fdd249fANALYSIS DATE:...

Malware Analysis – – 057e5fa8d05a2106572cfab80687b0b5

November 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 057e5fa8d05a2106572cfab80687b0b5SHA1: 853d6ac9cdd629b38e0312a008dafceb1f674a49ANALYSIS DATE: 2022-11-28T22:11:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – 6771e329be1dc02ec4868a92ae48c395

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:pops, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – ransomware – 116f1068d1213b7ed910ad0eccb37a27

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 116f1068d1213b7ed910ad0eccb37a27SHA1: d25a07e3fe55f0d90037aad8406eba017ca5d180ANALYSIS DATE: 2022-11-27T23:01:19ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 47[.]106[.]91[.]17:9999

November 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]136[.]106:8001

November 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 175[.]178[.]243[.]43:80

November 29, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 55ca818117630f3d7a6a7d342ba4709a

November 29, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 55ca818117630f3d7a6a7d342ba4709aSHA1: 218cef30a801952ff782ca50e16990a91a4fea0aANALYSIS DATE: 2022-11-28T23:42:41ZTTPS: T1060, T1112, T1053, T1222,...

Malware Analysis – chaos – e654d76dadfd3cefd9052a116afd0e00

November 29, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, family:satana, evasion, ransomware, spyware, stealerMD5: e654d76dadfd3cefd9052a116afd0e00SHA1: 0774c3f2cdf2ef9760d1cacaeb9464e6f59cf745ANALYSIS DATE: 2022-11-28T23:49:53ZTTPS: T1059, T1107, T1490, T1005, T1081, T1082,...

Malware Analysis – amadey – ed825538b098836508f416d290fca2cd

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, ransomware, trojanMD5: ed825538b098836508f416d290fca2cdSHA1: 526de1fc99079b354cc88ae4f0edc7af1d4f3345ANALYSIS DATE: 2022-11-28T23:03:47ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 74161da72b92f3dc29efa72b75dcf86c

November 29, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, upxMD5: 74161da72b92f3dc29efa72b75dcf86cSHA1: 8490c1331b1c40ce986306d5dda51670f93fd78cANALYSIS DATE: 2022-11-28T23:44:23ZTTPS: T1082, T1112, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

threatintel

Malware Analysis – evasion – 1b038e5617f685a71e6100071c469d30

Malware Analysis – ransomware – 9995dffe2ee432e7135b37c93ef0661f

Malware Analysis – ransomware – fc0956357b92f4c0db8817ccec0587cd

Malware Analysis – discovery – 291c6983919cf96defb04dc705d71b80

Malware Analysis – ransomware – 58db33d73a9407d09b03bb649d41069a

Malware Analysis – amadey – f7a4cd5f0ccd2170beaff3d99e75f86d

Malware Analysis – – 057e5fa8d05a2106572cfab80687b0b5

Malware Analysis – amadey – 6771e329be1dc02ec4868a92ae48c395

Malware Analysis – ransomware – 116f1068d1213b7ed910ad0eccb37a27

Cobalt Stike Beacon Detected – 47[.]106[.]91[.]17:9999

Cobalt Stike Beacon Detected – 43[.]143[.]136[.]106:8001

Cobalt Stike Beacon Detected – 175[.]178[.]243[.]43:80

Malware Analysis – djvu – 55ca818117630f3d7a6a7d342ba4709a

Malware Analysis – chaos – e654d76dadfd3cefd9052a116afd0e00

Malware Analysis – amadey – ed825538b098836508f416d290fca2cd

Malware Analysis – persistence – 74161da72b92f3dc29efa72b75dcf86c

Cobalt Stike Beacon Detected – 37[.]72[.]175[.]30:8443

Cobalt Stike Beacon Detected – 43[.]139[.]129[.]211:4433

Cobalt Stike Beacon Detected – 13[.]212[.]194[.]232:444

Brute Ratel C4 Detected – 54[.]238[.]217[.]34:80

Cobalt Stike Beacon Detected – 1[.]15[.]223[.]168:80

Brute Ratel C4 Detected – 54[.]235[.]16[.]137:443

Posh C2 Detected – 62[.]182[.]159[.]147:443

How a Unified Security Platform Protects the Cloud

[WARLOCK] – Ransomware Victim: tein[.]co[.]jp

[WARLOCK] – Ransomware Victim: mytune[.]me

[WARLOCK] – Ransomware Victim: energogroup[.]net

[WARLOCK] – Ransomware Victim: goldenline[.]com

[WARLOCK] – Ransomware Victim: metro[.]local

You may have missed