threatintel

Malware Analysis – ransomware – ec7478f1351f6452b6e15d14217a3a62

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ec7478f1351f6452b6e15d14217a3a62SHA1: 3dfa5c4361d89807a45ba6e60dfe8fe6a167e00aANALYSIS DATE: 2022-10-12T03:39:33ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9ab7e303b8526e80304d3efd4e9ef066

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9ab7e303b8526e80304d3efd4e9ef066SHA1: a20e4f6e4f6a72f65885b562bd13c2648954d5b1ANALYSIS DATE: 2022-10-12T03:40:09ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 8c9c8c78ef28d02eef8264809cec0f11

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8c9c8c78ef28d02eef8264809cec0f11SHA1: f767f65d272ac322dd2c6a6a075f216aece2a1b0ANALYSIS DATE: 2022-10-12T03:40:09ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – – 6d309b5782e0aa8ee536188b9038341d

October 12, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 6d309b5782e0aa8ee536188b9038341dSHA1: 530380931c3bc4093073c61a2e8939bf3fabe994ANALYSIS DATE: 2022-10-12T03:40:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – wannacry – 8a6b804142e22265de773a3abf0bd047

October 12, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 8a6b804142e22265de773a3abf0bd047SHA1: 10ff8adbc4d1a8302e31cee6913c8f14d0a78387ANALYSIS DATE: 2022-10-12T03:42:03ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – a51beb6c0ac1650cc9161d77a7b4ffe4

October 12, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: a51beb6c0ac1650cc9161d77a7b4ffe4SHA1: 140e7d3e026ed3e9372630792966943cafdf7d8cANALYSIS DATE: 2022-10-12T03:41:04ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 05ea8a5639a077d9a930b4651f97a5e4

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, collection, discovery, persistence, ransomware, spyware, stealer, vmprotectMD5: 05ea8a5639a077d9a930b4651f97a5e4SHA1: 9c65d4a9da6f52b1deacd09bd45b9f2a8453ce20ANALYSIS DATE: 2022-10-12T03:40:56ZTTPS: T1114, T1012,...

Malware Analysis – ransomware – 771cd68a3b03318fabd9112733cf589b

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 771cd68a3b03318fabd9112733cf589bSHA1: 5eff34f55cb1cf311bfa2bf7b6f7d47c99ef87eeANALYSIS DATE: 2022-10-12T04:19:24ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 0030061143793e596dacd17918e0fdb0

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0030061143793e596dacd17918e0fdb0SHA1: 7d2c097a367b58be0ba233a025778b2b57c078c8ANALYSIS DATE: 2022-10-12T04:20:05ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 41b2eb48ece8309621624bdc00a5b84e

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 41b2eb48ece8309621624bdc00a5b84eSHA1: 5fb468319040b0f2aeb89b3534130ccf96999850ANALYSIS DATE: 2022-10-12T04:02:06ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – ransomware – 46a201b8e6764adcb3163d49c0a7881b

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 46a201b8e6764adcb3163d49c0a7881bSHA1: 98d40fa0e4c39b3ecc04f71b1f952d6677107986ANALYSIS DATE: 2022-10-12T04:20:05ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 2eda905ddece5a601ce82ad106707697

October 12, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 2eda905ddece5a601ce82ad106707697SHA1: 73f8b1f266cc7bd575261290a9b01537d11d41b3ANALYSIS DATE: 2022-10-12T04:22:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – 7c88843932ed5fca7c04eb20ff322ab6

October 12, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7c88843932ed5fca7c04eb20ff322ab6SHA1: 247b25a926ab2bc863c8f2bc1aa28705edb044afANALYSIS DATE: 2022-10-12T04:22:03ZTTPS: T1107, T1490, T1082, T1012, T1120, T1005, T1081, T1060,...

Malware Analysis – wannacry – f59c100dc24aee439206d9a3989232ce

October 12, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: f59c100dc24aee439206d9a3989232ceSHA1: 371e747153587bde7a8efb12f9484e4e23174f1fANALYSIS DATE: 2022-10-12T04:22:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – c0a95f24ae226e0e55e23bf623bccad6

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c0a95f24ae226e0e55e23bf623bccad6SHA1: 3ac93a6cdc0b7e8ade586a19a64f97eb9e6a9a0bANALYSIS DATE: 2022-10-12T04:20:06ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 1d38638153085a0a0f0a4f7174e52a9b

October 12, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 1d38638153085a0a0f0a4f7174e52a9bSHA1: f0bb8179052451ac327e6fff048bc27c73bf7310ANALYSIS DATE: 2022-10-12T04:22:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – smokeloader – 041397972137dba410b074da3f72f700

October 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 041397972137dba410b074da3f72f700SHA1: 932d1dbadd55b612e40f8d9e9487201e8a493814ANALYSIS DATE: 2022-10-12T04:33:38ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 509eb96cfc6361d2b2bcc5eb67a14d2d

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 509eb96cfc6361d2b2bcc5eb67a14d2dSHA1: da75159aa96759419ef9cbfe49e852e25b5f953fANALYSIS DATE: 2022-10-12T04:47:55ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – danabot – 3b8fb8c58f48f70b9e0281cb22863078

October 12, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 3b8fb8c58f48f70b9e0281cb22863078SHA1:...

threatintel

Malware Analysis – ransomware – ec7478f1351f6452b6e15d14217a3a62

Malware Analysis – ransomware – 9ab7e303b8526e80304d3efd4e9ef066

Malware Analysis – ransomware – 8c9c8c78ef28d02eef8264809cec0f11

Malware Analysis – – 6d309b5782e0aa8ee536188b9038341d

Malware Analysis – wannacry – 8a6b804142e22265de773a3abf0bd047

Malware Analysis – wannacry – a51beb6c0ac1650cc9161d77a7b4ffe4

Malware Analysis – djvu – 05ea8a5639a077d9a930b4651f97a5e4

Malware Analysis – ransomware – 771cd68a3b03318fabd9112733cf589b

Malware Analysis – ransomware – 0030061143793e596dacd17918e0fdb0

Malware Analysis – djvu – 41b2eb48ece8309621624bdc00a5b84e

Malware Analysis – ransomware – 46a201b8e6764adcb3163d49c0a7881b

Malware Analysis – wannacry – 2eda905ddece5a601ce82ad106707697

Malware Analysis – persistence – 7c88843932ed5fca7c04eb20ff322ab6

Malware Analysis – wannacry – f59c100dc24aee439206d9a3989232ce

Malware Analysis – ransomware – c0a95f24ae226e0e55e23bf623bccad6

Malware Analysis – wannacry – 1d38638153085a0a0f0a4f7174e52a9b

Malware Analysis – smokeloader – 041397972137dba410b074da3f72f700

Malware Analysis – djvu – 509eb96cfc6361d2b2bcc5eb67a14d2d

Malware Analysis – danabot – 3b8fb8c58f48f70b9e0281cb22863078

Cobalt Stike Beacon Detected – 54[.]152[.]182[.]185:443

Cobalt Stike Beacon Detected – 185[.]244[.]36[.]183:4443

Cobalt Stike Beacon Detected – 188[.]241[.]240[.]127:443

Cobalt Stike Beacon Detected – 43[.]135[.]42[.]59:443

Cobalt Stike Beacon Detected – 89[.]208[.]105[.]2:80

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed