threatintel

Malware Analysis – ransomware – 8b17aa8e917d219da13b76764e4effeb

November 28, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8b17aa8e917d219da13b76764e4effebSHA1: 991dbedc1d53a0439c0da564032f82e6e34ec9f9ANALYSIS DATE: 2022-11-27T09:19:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – 17617b1c7afb92e0eb3756593a0149d1

November 28, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 17617b1c7afb92e0eb3756593a0149d1SHA1: a92d8857ec43faa122c339504a702d2909e6a68eANALYSIS DATE: 2022-11-27T09:19:17ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – a25a4392a587d3ee87813404898e323e

November 28, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a25a4392a587d3ee87813404898e323eSHA1: 62aeca8ad51ffa38073157772d0edef8e1fef827ANALYSIS DATE: 2022-11-27T09:11:19ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 36e417c655aa2d4a66f41a380405d184

November 28, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 36e417c655aa2d4a66f41a380405d184SHA1: 4ac804cd203bac9c4f9ae8ace68191bdb5957475ANALYSIS DATE: 2022-11-27T09:11:32ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – e8bb2018ddbcbed54dd54f4ce28be554

November 28, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e8bb2018ddbcbed54dd54f4ce28be554SHA1: 253816cd21d4e27578286f29a8ad2bd012191360ANALYSIS DATE: 2022-11-27T09:23:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – f2a6a90e32c55759a0e1aec31be045ce

November 28, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f2a6a90e32c55759a0e1aec31be045ceSHA1: 1fc0580ad87e7e86ae002e6e71c5477485dd8c24ANALYSIS DATE: 2022-11-27T09:37:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 837e2642ada9b40de33bc652bc6921f2

November 28, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 837e2642ada9b40de33bc652bc6921f2SHA1: 50aeb1e9d1822c2b1a04e06c400e5605d49e8e08ANALYSIS DATE: 2022-11-27T09:30:14ZTTPS: T1112, T1082, T1060, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – b720f8b393cfe572ce27e017669b435b

November 28, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b720f8b393cfe572ce27e017669b435bSHA1: d6d46122f82ed5d6b18c16d4b85b8a8a8f90a621ANALYSIS DATE: 2022-11-27T09:22:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 09647fcc43c94134505a3ca9439c4ecb

November 28, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasionMD5: 09647fcc43c94134505a3ca9439c4ecbSHA1: 6ab8885b3299daedad79cbc168f2c2bd680c2c54ANALYSIS DATE: 2022-11-27T09:43:25ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 71c30a38a2f501a7ff89dd728688865b

November 28, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 71c30a38a2f501a7ff89dd728688865bSHA1: c8c6fa63a18a663de13155be6c4a1c080fd32906ANALYSIS DATE: 2022-11-27T09:44:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – c1c07b34d7232c2c14360b7671e005b0

November 28, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: c1c07b34d7232c2c14360b7671e005b0SHA1: 9136dc11ce2d72664a2c388c416ff9d2c7e9eb63ANALYSIS DATE: 2022-11-27T09:49:25ZTTPS: T1107, T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 25145216945da24399dab7dd60127857

November 28, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 25145216945da24399dab7dd60127857SHA1: 477c17a53b4ed7cb0dd830aab3ab1a595e99d273ANALYSIS DATE: 2022-11-27T09:42:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – eac0a2ef48916b607b78cdcdf30dcf10

November 28, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: eac0a2ef48916b607b78cdcdf30dcf10SHA1: 9c5bc0be6ccfaf54b84b67a49503f8f47739540aANALYSIS DATE: 2022-11-27T09:54:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – e973e61b973301e65642e9b085616093

November 28, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: e973e61b973301e65642e9b085616093SHA1: fb8c1b599d4f8e136f72e4f4f83dd29948664a5cANALYSIS DATE: 2022-11-27T10:09:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 3169c4de1ad1da461ef7d2b0f43187ab

November 28, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 3169c4de1ad1da461ef7d2b0f43187abSHA1: 4abad864f7b85b29a7755c81634b09fd5ecd2645ANALYSIS DATE: 2022-11-27T10:10:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – fd9804f403f2ef383cf45530cb5c3783

November 28, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: fd9804f403f2ef383cf45530cb5c3783SHA1: 76a919bf0ab1730f089ed5c631c3886c1954c166ANALYSIS DATE: 2022-11-27T09:51:40ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – 098c12bb6bcfb37b533aebd016657000

November 28, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 098c12bb6bcfb37b533aebd016657000SHA1: 0f00d6e0b9cae806a2934888077b2bcff67fb74bANALYSIS DATE:...

Malware Analysis – amadey – d95b1173bd9e3a72977f605d0b9f37dc

November 28, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: d95b1173bd9e3a72977f605d0b9f37dcSHA1: b96cea4a174346446c804bab413532f11b6ef66aANALYSIS DATE:...

Malware Analysis – smokeloader – 89aee19231c5a7657cf2b57e351882c5

November 28, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 89aee19231c5a7657cf2b57e351882c5SHA1: 15e08ae78e4a14ffa038b8006e1d04eacfffb871ANALYSIS DATE: 2022-11-28T04:39:31ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – b6e1acc90f814a3c0474e2971e5a109b

November 28, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: b6e1acc90f814a3c0474e2971e5a109bSHA1: 338fbfcba1225e4e5bf25ac184f6eeb09ddeaf3bANALYSIS DATE: 2022-11-28T05:53:19ZTTPS: T1222, T1060, T1112, T1082, T1012, T1053 ScoreMeaningExample10Known badA...

threatintel

Malware Analysis – ransomware – 8b17aa8e917d219da13b76764e4effeb

Malware Analysis – banker – 17617b1c7afb92e0eb3756593a0149d1

Malware Analysis – persistence – a25a4392a587d3ee87813404898e323e

Malware Analysis – ransomware – 36e417c655aa2d4a66f41a380405d184

Malware Analysis – ransomware – e8bb2018ddbcbed54dd54f4ce28be554

Malware Analysis – ransomware – f2a6a90e32c55759a0e1aec31be045ce

Malware Analysis – evasion – 837e2642ada9b40de33bc652bc6921f2

Malware Analysis – ransomware – b720f8b393cfe572ce27e017669b435b

Malware Analysis – evasion – 09647fcc43c94134505a3ca9439c4ecb

Malware Analysis – ransomware – 71c30a38a2f501a7ff89dd728688865b

Malware Analysis – evasion – c1c07b34d7232c2c14360b7671e005b0

Malware Analysis – ransomware – 25145216945da24399dab7dd60127857

Malware Analysis – banker – eac0a2ef48916b607b78cdcdf30dcf10

Malware Analysis – evasion – e973e61b973301e65642e9b085616093

Malware Analysis – evasion – 3169c4de1ad1da461ef7d2b0f43187ab

Malware Analysis – ransomware – fd9804f403f2ef383cf45530cb5c3783

Malware Analysis – amadey – 098c12bb6bcfb37b533aebd016657000

Malware Analysis – amadey – d95b1173bd9e3a72977f605d0b9f37dc

Malware Analysis – smokeloader – 89aee19231c5a7657cf2b57e351882c5

Malware Analysis – djvu – b6e1acc90f814a3c0474e2971e5a109b

Cobalt Stike Beacon Detected – 62[.]138[.]7[.]234:80

Cobalt Stike Beacon Detected – 103[.]45[.]143[.]166:443

Cobalt Stike Beacon Detected – 152[.]136[.]153[.]12:8008

Cobalt Stike Beacon Detected – 175[.]178[.]243[.]43:8443

CVE Alert: CVE-2025-46784 – Entr’ouvert – Lasso

CVE Alert: CVE-2025-46404 – Entr’ouvert – Lasso

CVE Alert: CVE-2025-46705 – Entr’ouvert – Lasso

Cobalt Strike Beacon Detected – 8[.]138[.]222[.]215:443

Cobalt Strike Beacon Detected – 47[.]116[.]208[.]81:443

You may have missed