threatintel

Malware Analysis – ransomware – c9efcf91542f9b6b6ef926d427ab7f59

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: c9efcf91542f9b6b6ef926d427ab7f59SHA1: 786bd2cd50884cc7a6daf42078ce0ea8271666d3ANALYSIS DATE: 2022-10-15T03:43:58ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – b591669c02606c0be2de9179a0f15241

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b591669c02606c0be2de9179a0f15241SHA1: fd5eef2d45927b98346cd142880247985106cba3ANALYSIS DATE: 2022-10-15T03:43:27ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 13914c2470128a3244ddfc30b0619e83

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 13914c2470128a3244ddfc30b0619e83SHA1: 841850fdc866a56509adb6684fe401a0f8782e40ANALYSIS DATE: 2022-10-15T03:43:18ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 339f26f79c7a9ebed1c8b99e6abdcfb9

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 339f26f79c7a9ebed1c8b99e6abdcfb9SHA1: 40006b4f814cba1beb4c919dc4f4135229c81ef7ANALYSIS DATE: 2022-10-15T03:43:38ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 21194863c52f9f61347cb57f7c4eb9bc

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 21194863c52f9f61347cb57f7c4eb9bcSHA1: 0adaf7449180d90f9d4aa52ccd7eec8d2f37a4bfANALYSIS DATE: 2022-10-15T03:44:08ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – f6d05f1f65b85eb1228f6524bb3773e8

October 15, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: f6d05f1f65b85eb1228f6524bb3773e8SHA1: 2c1a3b5de5d9e34e20fcf39671b4359abd38507cANALYSIS DATE: 2022-10-15T04:17:03ZTTPS: T1112, T1088, T1089, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 0a22c178904b4fdc53b009f88de26b86

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0a22c178904b4fdc53b009f88de26b86SHA1: c33aeab0b4584c3be2271ca0bb95678289c3eba2ANALYSIS DATE: 2022-10-15T03:44:28ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 0ce864dc7c370c4f65b60c846ed19200

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0ce864dc7c370c4f65b60c846ed19200SHA1: 7796687e1eb14307c18bd52e5dc3d3c31785823fANALYSIS DATE: 2022-10-15T03:44:18ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 83d9a99d119b6cc5b114753d3e37f8f0

October 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 83d9a99d119b6cc5b114753d3e37f8f0SHA1: f69859b15315050efd2609dc787757ca6c0ce196ANALYSIS DATE: 2022-10-15T04:20:08ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – ransomware – 44577b39b8038f90ccb92137cf27e327

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 44577b39b8038f90ccb92137cf27e327SHA1: 70344930f9804bdcd081d447682d018ed087ca87ANALYSIS DATE: 2022-10-15T04:30:21ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9e16c007fdac055e76ef2d60e672eec5

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9e16c007fdac055e76ef2d60e672eec5SHA1: 2af383f6f50a1d35be2119356167835f3620e1d0ANALYSIS DATE: 2022-10-15T04:30:12ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 35103c5708eb87e5440e8023e59a4955

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 35103c5708eb87e5440e8023e59a4955SHA1: 5164063d5c20b040674fea404f84224e27b6ef3fANALYSIS DATE: 2022-10-15T04:30:26ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Cuba Ransomware Victim: Murphyfamilyventures

October 15, 2022

Cuba Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Experts disclose technical details of now-patched CVE-2022-37969 Windows Zero-Day

October 15, 2022

Researchers disclosed details of a now-patched flaw, tracked as CVE-2022-37969, in Windows Common Log File System (CLFS). The CVE-2022-37969 (CVSS score:...

Malware Analysis – djvu – 2dd757e54c502a35f8c659dcfd319f4d

October 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2dd757e54c502a35f8c659dcfd319f4dSHA1: da1a7e48fac3865678cba0514aa61e8da3e5d2afANALYSIS DATE: 2022-10-14T20:44:10ZTTPS: T1012, T1005, T1081, T1222,...

Malware Analysis – djvu – f1377d04bf69c8252eb15b0009451f27

October 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f1377d04bf69c8252eb15b0009451f27SHA1: 1a059a7cff0ebc701f732180f0e11165ddadf661ANALYSIS DATE: 2022-10-14T20:55:52ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 1ae23a5f0a5e8f9b0d900cdf77ab06a1

October 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1ae23a5f0a5e8f9b0d900cdf77ab06a1SHA1: b9ddf0f66e7bcc35fd42edb83d81c972e07e348dANALYSIS DATE: 2022-10-14T20:34:55ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – discovery – feba408eb9862548dc19c524be12f2b8

October 15, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: feba408eb9862548dc19c524be12f2b8SHA1: 8e6af2bd48523d64aafe150b89a3eca61cad0d58ANALYSIS DATE: 2022-10-14T21:40:05ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 54f91e976d7af909f689a82a8c4e0df8

October 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 54f91e976d7af909f689a82a8c4e0df8SHA1: 488f444c1d922c2137a5843d2d3925b7f6ca6e9eANALYSIS DATE: 2022-10-14T21:32:03ZTTPS: T1012, T1082, T1053, T1222,...

Malware Analysis – – 5943d8702e40a5ccd62e5a8d4c8852aa

October 15, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: 5943d8702e40a5ccd62e5a8d4c8852aaSHA1: c7f781f0baca9ddf424ba7e7532fd5566b58e48aANALYSIS DATE: 2022-10-14T21:42:30ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 00d5d44fa85b988b3fb1396e8fd1375a

October 15, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 00d5d44fa85b988b3fb1396e8fd1375aSHA1: 2e3febd24a9d28ac17b6d7b324b98e4dcaf5890eANALYSIS DATE: 2022-10-14T21:34:17ZTTPS: T1112, T1042, T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – 4448083027bde42252a132ba5be0bd25

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4448083027bde42252a132ba5be0bd25SHA1: 2637028e5bccda6f186f1f323e97bdd5858b90a3ANALYSIS DATE: 2022-10-14T22:06:05ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 4bd4fcdf39d6c79a71884a80ac3cafe7

October 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4bd4fcdf39d6c79a71884a80ac3cafe7SHA1: 1e05ec01474a5be43d96e03db9ae43838e9ada03ANALYSIS DATE: 2022-10-14T21:44:53ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – ransomware – dfb89b842afd8be96bca529084ebbd77

October 15, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: dfb89b842afd8be96bca529084ebbd77SHA1: ff68271ede970bea75d00dd5a55ae9a4301a61b4ANALYSIS DATE: 2022-10-14T22:04:27ZTTPS: T1059, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family...

threatintel

Malware Analysis – ransomware – c9efcf91542f9b6b6ef926d427ab7f59

Malware Analysis – ransomware – b591669c02606c0be2de9179a0f15241

Malware Analysis – ransomware – 13914c2470128a3244ddfc30b0619e83

Malware Analysis – ransomware – 339f26f79c7a9ebed1c8b99e6abdcfb9

Malware Analysis – ransomware – 21194863c52f9f61347cb57f7c4eb9bc

Malware Analysis – evasion – f6d05f1f65b85eb1228f6524bb3773e8

Malware Analysis – ransomware – 0a22c178904b4fdc53b009f88de26b86

Malware Analysis – ransomware – 0ce864dc7c370c4f65b60c846ed19200

Malware Analysis – djvu – 83d9a99d119b6cc5b114753d3e37f8f0

Malware Analysis – ransomware – 44577b39b8038f90ccb92137cf27e327

Malware Analysis – ransomware – 9e16c007fdac055e76ef2d60e672eec5

Malware Analysis – ransomware – 35103c5708eb87e5440e8023e59a4955

Cuba Ransomware Victim: Murphyfamilyventures

Experts disclose technical details of now-patched CVE-2022-37969 Windows Zero-Day

Malware Analysis – djvu – 2dd757e54c502a35f8c659dcfd319f4d

Malware Analysis – djvu – f1377d04bf69c8252eb15b0009451f27

Malware Analysis – djvu – 1ae23a5f0a5e8f9b0d900cdf77ab06a1

Malware Analysis – discovery – feba408eb9862548dc19c524be12f2b8

Malware Analysis – djvu – 54f91e976d7af909f689a82a8c4e0df8

Malware Analysis – – 5943d8702e40a5ccd62e5a8d4c8852aa

Malware Analysis – discovery – 00d5d44fa85b988b3fb1396e8fd1375a

Malware Analysis – ransomware – 4448083027bde42252a132ba5be0bd25

Malware Analysis – djvu – 4bd4fcdf39d6c79a71884a80ac3cafe7

Malware Analysis – ransomware – dfb89b842afd8be96bca529084ebbd77

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed