threatintel

Malware Analysis – persistence – 37d706f41b61151e39c7a524c6f06078

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 37d706f41b61151e39c7a524c6f06078SHA1: 6a1ee980e63889ba03bec520be5fc3217d60de0aANALYSIS DATE: 2022-10-20T22:40:18ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – danabot – 29dfdcebb44982e7dfa5e4de32c63930

October 21, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 29dfdcebb44982e7dfa5e4de32c63930SHA1: 3c5c325977ade7d7973193fe02ded7934d129dbfANALYSIS...

Malware Analysis – djvu – 8ee2efd7996707befe2ca2bf4cdfc789

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8ee2efd7996707befe2ca2bf4cdfc789SHA1: 176dfff1a8c12f0574b99292807c12ba11a1f04bANALYSIS DATE: 2022-10-20T22:33:10ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – djvu – 7be74bb040f92184a672419efc77a496

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7be74bb040f92184a672419efc77a496SHA1: c52058414af3863166837603d527bbc80a661740ANALYSIS DATE: 2022-10-20T22:31:12ZTTPS: T1082, T1005, T1081, T1012,...

Cobalt Stike Beacon Detected – 42[.]193[.]125[.]133:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 117[.]52[.]18[.]87:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]218:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]46:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 248dd76b7d66b2f80f64ebfbf3370a7c

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 248dd76b7d66b2f80f64ebfbf3370a7cSHA1: 7244aeeaa57ca5b2c18932fc15d1638ed0dd4e8dANALYSIS DATE: 2022-10-20T22:44:52ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 9e348def7efcaa8313170d7b62a54986

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9e348def7efcaa8313170d7b62a54986SHA1: 4fd08bd3ed1c781b663e4745d942b2fabe0a13b4ANALYSIS DATE: 2022-10-20T22:40:23ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 4ec905ca34582ff0931c1813a63febe1

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 4ec905ca34582ff0931c1813a63febe1SHA1: 6fdae2ec1763e345adcd8c956855b588b0c78ed4ANALYSIS DATE: 2022-10-20T22:40:42ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – b68ef4cdc50d0628782a0fffd6996a0d

October 21, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: b68ef4cdc50d0628782a0fffd6996a0dSHA1: 9e96ad3dea809b9bbe0b49668120be039c7fc4f9ANALYSIS DATE: 2022-10-20T22:40:34ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 20[.]101[.]35[.]71:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]230:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]123:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]135:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Solve the Cloud-Native App Security Puzzle with CNAPP

October 20, 2022

Explore the value of integrating cloud-native application protection into security and development. If you like the site, please consider joining...

Ransomware Insurance Security Strategies

October 20, 2022

Ransomware accounts for 75% of all cyber insurance claims yet 40% of business currently lack the coverage needed. Discover how...

Attack Surface Management 2022 Midyear Review Part 1

October 20, 2022

In our 2022 midyear roundup, we examine the most significant trends and incidents that influenced the cybersecurity landscape in the...

Experts spotted a new undetectable PowerShell Backdoor posing as a Windows update

October 20, 2022

Cybersecurity researchers warn of a new PowerShell backdoor that disguises itself as part of the Windows update process to avoid...

Malware Analysis – evasion – a75ac296c79e8bcbc858bd63e1b366ff

October 20, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a75ac296c79e8bcbc858bd63e1b366ffSHA1: 61ca3a0bf77c3dd114530a7b3c5970930628fbe5ANALYSIS DATE: 2022-10-20T14:29:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – 879c457a1652bb23ed26dacf248f616c

October 20, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealer, upxMD5: 879c457a1652bb23ed26dacf248f616cSHA1: 8d6a3b1f492d7dbed77d079749685dd5ac37f628ANALYSIS DATE: 2022-10-20T14:58:37ZTTPS: T1005, T1081, T1082, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – conti – 290c7dfb01e50cea9e19da81a781af2c

October 20, 2022

Score: 10 MALWARE FAMILY: contiTAGS:family:conti, ransomwareMD5: 290c7dfb01e50cea9e19da81a781af2cSHA1: 8a52c7645ec8fd6c217dfe5491461372acc4e849ANALYSIS DATE: 2022-10-20T14:58:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – a04ae26b12ca623a60efc3a8591087f4

October 20, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: a04ae26b12ca623a60efc3a8591087f4SHA1: 9455e95c390f589af7e80f95801deb2aa9db347eANALYSIS DATE: 2022-10-20T14:59:36ZTTPS: T1490, T1012, T1120, T1082, T1060, T1112, T1004, T1158,...

threatintel

Malware Analysis – persistence – 37d706f41b61151e39c7a524c6f06078

Malware Analysis – danabot – 29dfdcebb44982e7dfa5e4de32c63930

Malware Analysis – djvu – 8ee2efd7996707befe2ca2bf4cdfc789

Malware Analysis – djvu – 7be74bb040f92184a672419efc77a496

Cobalt Stike Beacon Detected – 42[.]193[.]125[.]133:443

Cobalt Stike Beacon Detected – 117[.]52[.]18[.]87:80

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]218:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]46:443

Malware Analysis – smokeloader – 248dd76b7d66b2f80f64ebfbf3370a7c

Malware Analysis – ransomware – 9e348def7efcaa8313170d7b62a54986

Malware Analysis – wannacry – 4ec905ca34582ff0931c1813a63febe1

Malware Analysis – wannacry – b68ef4cdc50d0628782a0fffd6996a0d

Cobalt Stike Beacon Detected – 20[.]101[.]35[.]71:80

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]230:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]123:443

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]135:443

Solve the Cloud-Native App Security Puzzle with CNAPP

Ransomware Insurance Security Strategies

Attack Surface Management 2022 Midyear Review Part 1

Experts spotted a new undetectable PowerShell Backdoor posing as a Windows update

Malware Analysis – evasion – a75ac296c79e8bcbc858bd63e1b366ff

Malware Analysis – persistence – 879c457a1652bb23ed26dacf248f616c

Malware Analysis – conti – 290c7dfb01e50cea9e19da81a781af2c

Malware Analysis – evasion – a04ae26b12ca623a60efc3a8591087f4

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed