threatintel

Malware Analysis – evasion – c86a81185ee4bf8c7082087b7991ff26

November 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: c86a81185ee4bf8c7082087b7991ff26SHA1: 3cecddcdf8de1cfc8847c41795817132e3acde88ANALYSIS DATE: 2022-11-26T23:09:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – banker – efcd94499c4b5b300b018f2f737a9d6f

November 27, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: efcd94499c4b5b300b018f2f737a9d6fSHA1: 496dafa8dd911801796925396c656ee80d87895dANALYSIS DATE: 2022-11-26T23:31:19ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – efe024f439f80653a8307212837f57c2

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: efe024f439f80653a8307212837f57c2SHA1: 57e3623cc827aeb85e4da279085698d5e1dd9956ANALYSIS DATE: 2022-11-26T23:26:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 856eda2999f61b8eb3dd4644693e35c9

November 27, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 856eda2999f61b8eb3dd4644693e35c9SHA1: 3b951117bec37a31731ca33fca3f5ba690cb8117ANALYSIS DATE: 2022-11-26T23:15:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 2b40a47de15dd9c462f93ad318987b82

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2b40a47de15dd9c462f93ad318987b82SHA1: 311b295cb5b1f290224ee830888ac49716d25f30ANALYSIS DATE: 2022-11-26T23:17:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – d8caf0b22030e276d5b799718d7dee82

November 27, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: d8caf0b22030e276d5b799718d7dee82SHA1: afd98f571678e9af2a64ac2a5969abf0c7ce2117ANALYSIS DATE: 2022-11-26T23:37:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – banker – 6ea869cfd386316af2a07260809bca9d

November 27, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 6ea869cfd386316af2a07260809bca9dSHA1: b0556e7b5ee83379421687152cdd265e7b5204c4ANALYSIS DATE: 2022-11-26T23:34:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 5b84af02a3219a4e75f979ff342f231a

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5b84af02a3219a4e75f979ff342f231aSHA1: b479a81749bf944793749c43c8866315054ceb9dANALYSIS DATE: 2022-11-26T23:40:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 62a73492dffb99a13cb9776fb6536eab

November 27, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 62a73492dffb99a13cb9776fb6536eabSHA1: 8a40eadc0b314e2853f6c42ce81bd954f3a4fc86ANALYSIS DATE: 2022-11-26T23:31:48ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 33c92bf163b90b299f1b1ff9d4d8ada1

November 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, infostealer, ransomwareMD5: 33c92bf163b90b299f1b1ff9d4d8ada1SHA1: d30d0825635846cb166dd671648bc0ebb0a66941ANALYSIS DATE: 2022-11-27T00:03:20ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 7de27791c3a12e2a1bed2569e9a9645c

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7de27791c3a12e2a1bed2569e9a9645cSHA1: 10790cfca534b12f782c600cfdd188b97e6f17b3ANALYSIS DATE: 2022-11-26T23:47:34ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 7aedddef6e9c3a7a7b452ecef25fc9ac

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7aedddef6e9c3a7a7b452ecef25fc9acSHA1: 0d17930393b26e72530576cb6c6aaac38c407921ANALYSIS DATE: 2022-11-26T23:56:30ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 9748e53337173818f13942d3db883e1e

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9748e53337173818f13942d3db883e1eSHA1: 8eb5c7c518d0a4dc3f7f8ce2019620662f093410ANALYSIS DATE: 2022-11-26T23:57:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 21c5c5af237e12ffde85c8ac65dc7e38

November 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 21c5c5af237e12ffde85c8ac65dc7e38SHA1: f662da6786566113eb940a902fd018918dbdcfc2ANALYSIS DATE: 2022-11-27T15:25:13ZTTPS: T1222, T1005, T1081, T1060,...

Malware Analysis – djvu – 3e8f9787ca3716a9526bd49ba9de2c94

November 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3e8f9787ca3716a9526bd49ba9de2c94SHA1: 37c89b71cf5bb4d431e566653e780a4d6741cc2eANALYSIS DATE: 2022-11-27T17:48:58ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – ransomware – 0bb180b5ec872c58f05bc30fb51499a7

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0bb180b5ec872c58f05bc30fb51499a7SHA1: f43ca361ac37e15fe59c03a6d4422b5614c68e25ANALYSIS DATE: 2022-11-27T00:03:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – d496de53aa5e2ee266b019aa405d18b9

November 27, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d496de53aa5e2ee266b019aa405d18b9SHA1: 8581754edb99b79262cb699726f1ed949ab5bc52ANALYSIS DATE: 2022-11-27T15:28:24ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Security Affairs newsletter Round 395

November 27, 2022

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for...

US FCC bans the import of electronic equipment from Chinese firms

November 27, 2022

The U.S. Federal Communications Commission announced it will completely ban the import of electronic equipment from Huawei, ZTE, Hytera, Hikvision,...

Malware Analysis – persistence – 6ea2956227d379f60f1e4f91faeac2d4

November 27, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6ea2956227d379f60f1e4f91faeac2d4SHA1: 8e2be70032063610b318b104bdbe061af72f4888ANALYSIS DATE: 2022-11-26T17:36:28ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 59c1dea8f817439f81b2310829482c34

November 27, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 59c1dea8f817439f81b2310829482c34SHA1: 7432af28fd065a3381252bf5db864f930496628eANALYSIS DATE: 2022-11-26T18:00:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – fe6bc128dc68dda9234feb4c99e4568b

November 27, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: fe6bc128dc68dda9234feb4c99e4568bSHA1: 3eb94fd8d3838e80538dfbaafa502d0502953905ANALYSIS DATE: 2022-11-26T17:40:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – infostealer – 31302aa419bf57cef9739f9ed071323f

November 27, 2022

Score: 8 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: 31302aa419bf57cef9739f9ed071323fSHA1: 28735df4d54fae823b795f7bb5292c0298abab1dANALYSIS DATE: 2022-11-26T17:55:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 659bf757508b15b17ef7674710f1f890

November 27, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 659bf757508b15b17ef7674710f1f890SHA1: 33b079deb0a4925628e24fcd2b91d313f94ae971ANALYSIS DATE: 2022-11-26T17:49:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

threatintel

Malware Analysis – evasion – c86a81185ee4bf8c7082087b7991ff26

Malware Analysis – banker – efcd94499c4b5b300b018f2f737a9d6f

Malware Analysis – ransomware – efe024f439f80653a8307212837f57c2

Malware Analysis – ransomware – 856eda2999f61b8eb3dd4644693e35c9

Malware Analysis – ransomware – 2b40a47de15dd9c462f93ad318987b82

Malware Analysis – banker – d8caf0b22030e276d5b799718d7dee82

Malware Analysis – banker – 6ea869cfd386316af2a07260809bca9d

Malware Analysis – ransomware – 5b84af02a3219a4e75f979ff342f231a

Malware Analysis – persistence – 62a73492dffb99a13cb9776fb6536eab

Malware Analysis – evasion – 33c92bf163b90b299f1b1ff9d4d8ada1

Malware Analysis – ransomware – 7de27791c3a12e2a1bed2569e9a9645c

Malware Analysis – ransomware – 7aedddef6e9c3a7a7b452ecef25fc9ac

Malware Analysis – ransomware – 9748e53337173818f13942d3db883e1e

Malware Analysis – djvu – 21c5c5af237e12ffde85c8ac65dc7e38

Malware Analysis – djvu – 3e8f9787ca3716a9526bd49ba9de2c94

Malware Analysis – ransomware – 0bb180b5ec872c58f05bc30fb51499a7

Malware Analysis – ransomware – d496de53aa5e2ee266b019aa405d18b9

Security Affairs newsletter Round 395

US FCC bans the import of electronic equipment from Chinese firms

Malware Analysis – persistence – 6ea2956227d379f60f1e4f91faeac2d4

Malware Analysis – ransomware – 59c1dea8f817439f81b2310829482c34

Malware Analysis – ransomware – fe6bc128dc68dda9234feb4c99e4568b

Malware Analysis – infostealer – 31302aa419bf57cef9739f9ed071323f

Malware Analysis – ransomware – 659bf757508b15b17ef7674710f1f890

[QILIN] – Ransomware Victim: Francehopital

CVE Alert: CVE-2025-20343 – Cisco – Cisco Identity Services Engine Software

[DEVMAN] – Ransomware Victim: www[.]oucru[.]org

[INCRANSOM] – Ransomware Victim: sensationalteeth[.]com

[RHYSIDA] – Ransomware Victim: KISS FM

You may have missed