threatintel

Malware Analysis – smokeloader – 449b7be8f61cd4ffd5a80e8851ead125

October 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 449b7be8f61cd4ffd5a80e8851ead125SHA1: 25d911c7ff9d6d4fea8ab4aca26ff4d5559b35f7ANALYSIS DATE: 2022-10-13T02:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 2935ee61391af466b8d503e016abe89c

October 13, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2935ee61391af466b8d503e016abe89cSHA1: f0e642ae088d09252c2bd1d9b3aa57a5349c8627ANALYSIS DATE: 2022-10-13T03:20:35ZTTPS: T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – f4eea2dda8834439364e89108e16fd2a

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f4eea2dda8834439364e89108e16fd2aSHA1: 19237f6fef37c80dc5df451057735cf720581b64ANALYSIS DATE: 2022-10-13T03:20:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 1306caaa78c7749015bda1066124157a

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1306caaa78c7749015bda1066124157aSHA1: 632fa98d225c8e3a40ef50b39c34f1791acdb902ANALYSIS DATE: 2022-10-13T03:21:04ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – b1e5623d6e1520cbbe3ff97333118ddd

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b1e5623d6e1520cbbe3ff97333118dddSHA1: 6566483e5b3350b55c5ef53623d87bcfc7be47ffANALYSIS DATE: 2022-10-13T03:21:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – d99a0b7820ff467bb1aad340e3ef3f88

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d99a0b7820ff467bb1aad340e3ef3f88SHA1: a362e0f491ab3e2187f0ef6be6549a60320e5b40ANALYSIS DATE: 2022-10-13T03:41:03ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 96a55bb485d6ae72be9da2d0b87857dc

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 96a55bb485d6ae72be9da2d0b87857dcSHA1: 27d650da86dfc94347b6b114ae96858f01448de8ANALYSIS DATE: 2022-10-13T03:41:03ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – c13fa46fd3fe447a13ebaea04e252a09

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c13fa46fd3fe447a13ebaea04e252a09SHA1: 200436ee43193d6998304c58ed06bcfdba73a002ANALYSIS DATE: 2022-10-13T03:21:06ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – danabot – babc8419c728d75ea8ee8c3b1cd9baf2

October 13, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: babc8419c728d75ea8ee8c3b1cd9baf2SHA1:...

Malware Analysis – ransomware – 4f65eec412c37cc7a975a8ea106bad54

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4f65eec412c37cc7a975a8ea106bad54SHA1: 8d0a356b9ad5531ddebfc48f1674b83473fd4769ANALYSIS DATE: 2022-10-13T03:41:03ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – abf3b4ea341bb59d85285689f1896c2c

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: abf3b4ea341bb59d85285689f1896c2cSHA1: 0204152bd6822957341b9f79b0808d2ca25676d1ANALYSIS DATE: 2022-10-13T04:13:14ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – djvu – 303b4f10a8e0d954f4dd3957e154115e

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 303b4f10a8e0d954f4dd3957e154115eSHA1: 634c5e625b7dc33dd9ec642a4804d84d406247e8ANALYSIS DATE: 2022-10-13T04:17:25ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – 5bfd634e7ac4c3af07795bf372900438

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 5bfd634e7ac4c3af07795bf372900438SHA1: 858e1d79faa655435ae505da31c93ac765e754d9ANALYSIS DATE: 2022-10-13T03:41:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 83491e1098bb33db8d7031012fb0b9ee

October 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 83491e1098bb33db8d7031012fb0b9eeSHA1: bd2adcf7b00e5a308aef20c8230f781d71a77974ANALYSIS DATE: 2022-10-13T04:35:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 8e36f9c207ef759a245d7163396a0214

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8e36f9c207ef759a245d7163396a0214SHA1: 2f2f8e3101c7a15ed35b3a2a99194466e2ce0bf4ANALYSIS DATE: 2022-10-13T04:41:04ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 46e0ca7ac55d9abaf3919faccbd19c48

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 46e0ca7ac55d9abaf3919faccbd19c48SHA1: 58f48d86e6d9e15f912e74a992595eb4711bad47ANALYSIS DATE: 2022-10-13T04:41:04ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 3cb2e6b95ab69028f2c9134c048a63e8

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: 3cb2e6b95ab69028f2c9134c048a63e8SHA1: e9349fd825a9bc00d9385d229422364c04d90fccANALYSIS DATE: 2022-10-13T04:32:05ZTTPS: T1130, T1112, T1053, T1060, T1222,...

Malware Analysis – ransomware – ea142a4996841131344cef783c74a6ff

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ea142a4996841131344cef783c74a6ffSHA1: 83578e4a549ab21b6b38fad4782c4aeecb8bfe5eANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 3d3ce60c54769f43cc846cd02aa2d764

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3d3ce60c54769f43cc846cd02aa2d764SHA1: 46241f75ee1717e9ca601c204354c0656a2faff7ANALYSIS DATE: 2022-10-13T04:42:04ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 25f75f20df196dfb6b741ff34db2d8fa

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 25f75f20df196dfb6b741ff34db2d8faSHA1: b664a9f60e304ac6e3f830c7bacbcd68af2475b2ANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 3fbc6e5194658e7002c4566d883ee832

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3fbc6e5194658e7002c4566d883ee832SHA1: 937ca54be053e9cc89064472d4329a7a5436ca02ANALYSIS DATE: 2022-10-13T04:42:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – e8be108263e9911badc264e5d9cf3852

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e8be108263e9911badc264e5d9cf3852SHA1: 9a23be6ee2da10230a27c15c79ef4ceb1e0f034aANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – c9940322c64db390abd6f8095f89b5f4

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: c9940322c64db390abd6f8095f89b5f4SHA1: 44ca100d0dee7e801a02e4128319da15742c315aANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – e098be2348879d120c081c5c3ec6e80c

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e098be2348879d120c081c5c3ec6e80cSHA1: 16fe2ee6ec637de4117fbf76dffe53297d801c24ANALYSIS DATE: 2022-10-13T04:42:05ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

threatintel

Malware Analysis – smokeloader – 449b7be8f61cd4ffd5a80e8851ead125

Malware Analysis – ransomware – 2935ee61391af466b8d503e016abe89c

Malware Analysis – ransomware – f4eea2dda8834439364e89108e16fd2a

Malware Analysis – ransomware – 1306caaa78c7749015bda1066124157a

Malware Analysis – ransomware – b1e5623d6e1520cbbe3ff97333118ddd

Malware Analysis – ransomware – d99a0b7820ff467bb1aad340e3ef3f88

Malware Analysis – ransomware – 96a55bb485d6ae72be9da2d0b87857dc

Malware Analysis – djvu – c13fa46fd3fe447a13ebaea04e252a09

Malware Analysis – danabot – babc8419c728d75ea8ee8c3b1cd9baf2

Malware Analysis – ransomware – 4f65eec412c37cc7a975a8ea106bad54

Malware Analysis – djvu – abf3b4ea341bb59d85285689f1896c2c

Malware Analysis – djvu – 303b4f10a8e0d954f4dd3957e154115e

Malware Analysis – ransomware – 5bfd634e7ac4c3af07795bf372900438

Malware Analysis – smokeloader – 83491e1098bb33db8d7031012fb0b9ee

Malware Analysis – ransomware – 8e36f9c207ef759a245d7163396a0214

Malware Analysis – ransomware – 46e0ca7ac55d9abaf3919faccbd19c48

Malware Analysis – djvu – 3cb2e6b95ab69028f2c9134c048a63e8

Malware Analysis – ransomware – ea142a4996841131344cef783c74a6ff

Malware Analysis – ransomware – 3d3ce60c54769f43cc846cd02aa2d764

Malware Analysis – ransomware – 25f75f20df196dfb6b741ff34db2d8fa

Malware Analysis – ransomware – 3fbc6e5194658e7002c4566d883ee832

Malware Analysis – ransomware – e8be108263e9911badc264e5d9cf3852

Malware Analysis – ransomware – c9940322c64db390abd6f8095f89b5f4

Malware Analysis – ransomware – e098be2348879d120c081c5c3ec6e80c

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed