threatintel

Malware Analysis – joker – 4ba2d52786e2bcd0d9447ec1de087adb

October 27, 2022

Score: 10 MALWARE FAMILY: jokerTAGS:family:joker, discovery, infostealer, persistence, ransomware, trojanMD5: 4ba2d52786e2bcd0d9447ec1de087adbSHA1: a8685d4f9eea009ebd2cfb5e2807987fc0870a45ANALYSIS DATE: 2022-10-26T22:34:22ZTTPS: T1060, T1112, T1005, T1158, T1057, T1082,...

Malware Analysis – djvu – 8e3d0716be0c042c31434517d41f8894

October 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – evasion – b2dbb36c7dde16ddc0e751ccc25761db

October 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojanMD5: b2dbb36c7dde16ddc0e751ccc25761dbSHA1: 5ed7353a9d68a883b26c26bcd5ad1bb466cf6855ANALYSIS DATE: 2022-10-26T22:28:59ZTTPS: T1088, T1089, T1112, T1082, T1031, T1060, T1004,...

Cobalt Stike Beacon Detected – 139[.]196[.]237[.]171:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]22:80

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]154[.]13[.]128:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 35[.]89[.]139[.]95:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 294a4cd1f2a8760a0aebee89ffcbbd96

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 294a4cd1f2a8760a0aebee89ffcbbd96SHA1: f5ce37cff3b02028346a7c046ec9c5075d3268e3ANALYSIS DATE: 2022-10-26T22:40:42ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 7548a88d0b78e9d0dcc189390a9b7a22

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7548a88d0b78e9d0dcc189390a9b7a22SHA1: 858feecd4f64e5a169db5f73c4342336843c2382ANALYSIS DATE: 2022-10-26T22:40:32ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – a904ae59207985b05c045ded383e05a5

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a904ae59207985b05c045ded383e05a5SHA1: 54b685cdff1db745e5b90154d2e1d39b93817c4fANALYSIS DATE: 2022-10-26T22:40:59ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – fbb392081a6b3866e045b439de338192

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fbb392081a6b3866e045b439de338192SHA1: 910cdf612161c3ac8d7293eb9ee5556a390202cdANALYSIS DATE: 2022-10-26T22:40:53ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – b5585ac17390ab29e440ba3588f3a190

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b5585ac17390ab29e440ba3588f3a190SHA1: 71e215327bff3a010f1c60ff725ac8a3faf98ed9ANALYSIS DATE: 2022-10-26T22:41:09ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – d199170c833669792b4fac70842b9188

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d199170c833669792b4fac70842b9188SHA1: 897cff11d1ffe41834159817d49e73256fe9ced9ANALYSIS DATE: 2022-10-26T22:41:04ZTTPS: T1082, T1091, T1005, T1081, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 1ae9b2c4c1ee0618543d152e41e61776

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 1ae9b2c4c1ee0618543d152e41e61776SHA1: 94a33d5ef4c5ce30878d3536048358b023dfa4c6ANALYSIS DATE: 2022-10-26T22:41:20ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – a3214ca1f3847f81b9812fbb3b152556

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a3214ca1f3847f81b9812fbb3b152556SHA1: fe5f16bfeb66d6f8c6be5c9055f6861736758c68ANALYSIS DATE: 2022-10-26T22:41:13ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

threatintel

Malware Analysis – joker – 4ba2d52786e2bcd0d9447ec1de087adb

Malware Analysis – djvu – 8e3d0716be0c042c31434517d41f8894

Malware Analysis – evasion – b2dbb36c7dde16ddc0e751ccc25761db

Cobalt Stike Beacon Detected – 139[.]196[.]237[.]171:443

Cobalt Stike Beacon Detected – 89[.]185[.]84[.]22:80

Cobalt Stike Beacon Detected – 45[.]154[.]13[.]128:443

Cobalt Stike Beacon Detected – 35[.]89[.]139[.]95:443

Malware Analysis – ransomware – 294a4cd1f2a8760a0aebee89ffcbbd96

Malware Analysis – ransomware – 7548a88d0b78e9d0dcc189390a9b7a22

Malware Analysis – ransomware – a904ae59207985b05c045ded383e05a5

Malware Analysis – ransomware – fbb392081a6b3866e045b439de338192

Malware Analysis – ransomware – b5585ac17390ab29e440ba3588f3a190

Malware Analysis – ransomware – d199170c833669792b4fac70842b9188

Malware Analysis – ransomware – 1ae9b2c4c1ee0618543d152e41e61776

Malware Analysis – ransomware – a3214ca1f3847f81b9812fbb3b152556

Threat Actors Target AWS EC2 Workloads to Steal Credentials

Addressing Ransomware in Hospitals & Medical Devices

See Tickets discloses data breach, customers’ credit card data exposed

BlackCat/ALPHV Ransomware Victim: RecordTV

BlackCat/ALPHV Ransomware Victim: Longhorn Investments

BlackCat/ALPHV Ransomware Victim: Jam Filled Entertainment

BlackCat/ALPHV Ransomware Victim: Döhler HACKED! More then 800 GB sensitive data LEAKED!

BlackCat/ALPHV Ransomware Victim: Egyptian Electric Cooperative Association

BlackCat/ALPHV Ransomware Victim: Mdaemon Technologies

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed