threatintel

Malware Analysis – djvu – 955a87720cab36806acf992685552830

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 955a87720cab36806acf992685552830SHA1: 79559db98b1530c2a29709114558a12669f8b9f0ANALYSIS DATE: 2022-10-21T08:29:00ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – surtr – 5409ee640663b8d1f520af46c1146c0e

October 21, 2022

Score: 10 MALWARE FAMILY: surtrTAGS:family:surtr, evasion, ransomware, upxMD5: 5409ee640663b8d1f520af46c1146c0eSHA1: 73eebd0dd94ce3d161a7f191196b8bcc354af55aANALYSIS DATE: 2022-10-21T08:20:23ZTTPS: T1490, T1059, T1107, T1485, T1082, T1012, T1120 ScoreMeaningExample10Known...

Malware Analysis – danabot – 7f3faa5965f0b3489a3fbbc305e7b0e0

October 21, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, bootkit, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 7f3faa5965f0b3489a3fbbc305e7b0e0SHA1:...

Malware Analysis – wannacry – 6fde18afcf48e21e23c7984487abf6b9

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 6fde18afcf48e21e23c7984487abf6b9SHA1: 2cf046a1485c2f1db310fee2ca65c46ad31ceccfANALYSIS DATE: 2022-10-21T08:40:30ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 3c37d81bc22dbb23d274d312e0be5abe

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3c37d81bc22dbb23d274d312e0be5abeSHA1: eecffb48af2fa209358778560cc9187bccf1b113ANALYSIS DATE: 2022-10-21T09:05:26ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – 6d9512776c224ad17a26a1ebb11c4057

October 21, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6d9512776c224ad17a26a1ebb11c4057SHA1: 79e2ee36a8004c37eababfcdb399fff0af324b08ANALYSIS DATE: 2022-10-21T09:07:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 204[.]10[.]120[.]109:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]151:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]85:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]4:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 8fde8356e42e1bffe6c17ee82f0cbe43

October 21, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: 8fde8356e42e1bffe6c17ee82f0cbe43SHA1: 5fdb9ae3ada1ab7a60ac0e6dbe473f5866f8980bANALYSIS DATE: 2022-10-21T09:16:53ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 95241c3bc1900fbeef743479073f82dc

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 95241c3bc1900fbeef743479073f82dcSHA1: 81b171f4fe1e769f85c67cbd47e10075960a2c73ANALYSIS DATE: 2022-10-21T09:20:49ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – wannacry – 15f71852c26b3668b8a29011a13569f9

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 15f71852c26b3668b8a29011a13569f9SHA1: 5c05775644c507b425fd99de73477ecb9ef293fcANALYSIS DATE: 2022-10-21T09:20:29ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 28e8c10d07e7dc23301be62f5a7feb0c

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 28e8c10d07e7dc23301be62f5a7feb0cSHA1: 5dbf1480615a29dea5c9589433bf3541dffccfb0ANALYSIS DATE: 2022-10-21T09:20:22ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]14:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]247:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]155:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]154:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – danabot – 34dac80c97059a81bd409cb658666582

October 21, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, backdoor, banker, collection, discovery, persistence, ransomware, trojanMD5: 34dac80c97059a81bd409cb658666582SHA1: 037e1563852f7e3e9febcadaf9a14f45ffcd66daANALYSIS DATE: 2022-10-21T09:33:16ZTTPS: T1082, T1012,...

Malware Analysis – djvu – 5b8713487da08ae104fc4b80f7c7fa90

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5b8713487da08ae104fc4b80f7c7fa90SHA1: de2f46346055d9a21e4a20db6d63e3cd16a2a8bcANALYSIS DATE: 2022-10-21T09:48:52ZTTPS: T1053, T1012, T1005, T1081,...

Malware Analysis – djvu – fef7cf385ca2cce744b82dd651f86db4

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: fef7cf385ca2cce744b82dd651f86db4SHA1: 68444a895fde67f7b9a8db6bb17d5c02cb704552ANALYSIS DATE: 2022-10-21T09:26:31ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – f52b4e894b2d577073ef81610150e2a4

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f52b4e894b2d577073ef81610150e2a4SHA1: b3aa05260ad6b0cb6c3cd8705968e8e5d8ebb46bANALYSIS DATE: 2022-10-21T09:36:43ZTTPS: T1012, T1005, T1081, T1222,...

Cobalt Stike Beacon Detected – 20[.]73[.]54[.]98:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]14[.]60[.]232:5555

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

threatintel

Malware Analysis – djvu – 955a87720cab36806acf992685552830

Malware Analysis – surtr – 5409ee640663b8d1f520af46c1146c0e

Malware Analysis – danabot – 7f3faa5965f0b3489a3fbbc305e7b0e0

Malware Analysis – wannacry – 6fde18afcf48e21e23c7984487abf6b9

Malware Analysis – djvu – 3c37d81bc22dbb23d274d312e0be5abe

Malware Analysis – ransomware – 6d9512776c224ad17a26a1ebb11c4057

Cobalt Stike Beacon Detected – 204[.]10[.]120[.]109:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]151:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]85:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]4:443

Malware Analysis – ransomware – 8fde8356e42e1bffe6c17ee82f0cbe43

Malware Analysis – djvu – 95241c3bc1900fbeef743479073f82dc

Malware Analysis – wannacry – 15f71852c26b3668b8a29011a13569f9

Malware Analysis – wannacry – 28e8c10d07e7dc23301be62f5a7feb0c

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]14:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]247:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]155:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]154:443

Malware Analysis – danabot – 34dac80c97059a81bd409cb658666582

Malware Analysis – djvu – 5b8713487da08ae104fc4b80f7c7fa90

Malware Analysis – djvu – fef7cf385ca2cce744b82dd651f86db4

Malware Analysis – djvu – f52b4e894b2d577073ef81610150e2a4

Cobalt Stike Beacon Detected – 20[.]73[.]54[.]98:80

Cobalt Stike Beacon Detected – 1[.]14[.]60[.]232:5555

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed