threatintel

Malware Analysis – evasion – 918e6cdb363dc23ff1875e334136b100

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, trojanMD5: 918e6cdb363dc23ff1875e334136b100SHA1: fc604fc3d97ba75ccd0673fe2eb0c41a332f3a4eANALYSIS DATE: 2022-10-30T22:32:13ZTTPS: T1060, T1112, T1158, T1088, T1089, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 82894aa1d6b7617537ac1542d2230ae0

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 82894aa1d6b7617537ac1542d2230ae0SHA1: 512cef9ad8b4c59ff880c86da0380282b1c2f291ANALYSIS DATE: 2022-10-30T22:32:04ZTTPS: T1004, T1112, T1158, T1082, T1012, T1060,...

Malware Analysis – evasion – a24e60454aeb6a930cba580af779bbd0

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a24e60454aeb6a930cba580af779bbd0SHA1: ec0ba985d86c27ee34eb51ec01635fb09e20f116ANALYSIS DATE: 2022-10-30T22:32:17ZTTPS: T1158, T1112, T1088, T1089, T1082, T1005,...

Malware Analysis – evasion – a22787100dd832f4d9903c0f3ba68280

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a22787100dd832f4d9903c0f3ba68280SHA1: 627c7dcf888f5f8be877f34b9f253263bd816910ANALYSIS DATE: 2022-10-30T22:32:24ZTTPS: T1088, T1089, T1112, T1082, T1005, T1081,...

Malware Analysis – octo – fe8c5119c2e887e22028919ce65d5fc2

October 31, 2022

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, evasion, infostealer, ransomware, rat, trojanMD5: fe8c5119c2e887e22028919ce65d5fc2SHA1: c264d92e2ef991dad17896589b04344304b50fcfANALYSIS DATE: 2022-10-31T16:35:24ZTTPS: ScoreMeaningExample10Known badA malware family was...

Malware Analysis – smokeloader – 228c8eb91f844d89235c7bc80ad57a85

October 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 228c8eb91f844d89235c7bc80ad57a85SHA1: ad06384bedb70d6a90efe277bea1b440a6d76d83ANALYSIS DATE: 2022-10-31T15:34:53ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 144f0104997e1d57ec26ef608201819a

October 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 144f0104997e1d57ec26ef608201819aSHA1: 61e55c0094594a5714a945b07a4fc7a3baed3fffANALYSIS DATE: 2022-10-31T16:39:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 7129291fc3d97377200f8a24ad06930a

October 31, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7129291fc3d97377200f8a24ad06930aSHA1: 3f858d2837529e6c973ffa7c26c643e9748e7282ANALYSIS DATE: 2022-10-31T17:01:04ZTTPS: T1005, T1081, T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – 312b08af732069833358094647763db8

October 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 312b08af732069833358094647763db8SHA1: 6fba36cf4a478f5f6dddf3a335979947f85c313dANALYSIS DATE: 2022-10-31T17:26:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f125e972f42ff30bf7df357311249aa3

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: f125e972f42ff30bf7df357311249aa3SHA1: 9bd85179c11ea8cd9f0954a406c6cae4d9585106ANALYSIS...

Malware Analysis – spyware – 6468ee100d88c71d55dfdcf4e30f991e

October 31, 2022

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 6468ee100d88c71d55dfdcf4e30f991eSHA1: 5c520d2d7dc4c9e5d536d3aff998185657d40ac8ANALYSIS DATE: 2022-10-31T17:01:04ZTTPS: T1012, T1120, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family was...

threatintel

Malware Analysis – evasion – 918e6cdb363dc23ff1875e334136b100

Malware Analysis – evasion – 82894aa1d6b7617537ac1542d2230ae0

Malware Analysis – evasion – a24e60454aeb6a930cba580af779bbd0

Malware Analysis – evasion – a22787100dd832f4d9903c0f3ba68280

Malware Analysis – octo – fe8c5119c2e887e22028919ce65d5fc2

Malware Analysis – smokeloader – 228c8eb91f844d89235c7bc80ad57a85

Malware Analysis – smokeloader – 144f0104997e1d57ec26ef608201819a

Malware Analysis – persistence – 7129291fc3d97377200f8a24ad06930a

Malware Analysis – smokeloader – 312b08af732069833358094647763db8

Malware Analysis – djvu – f125e972f42ff30bf7df357311249aa3

Malware Analysis – spyware – 6468ee100d88c71d55dfdcf4e30f991e

Wannacry, the hybrid malware that brought the world to its knees

Snatch group claims to have hacked military provider HENSOLDT France

GitHub flaw could have allowed attackers to takeover repositories of other users

LockBit 3.0 Ransomware Victim: seamlessglobalsolutions[.]com

LockBit 3.0 Ransomware Victim: close-upinternational[.]com[.]uy

LockBit 3.0 Ransomware Victim: sociedadbilbaina[.]com

Reverse_SSH – SSH Based Reverse Shell

Cobalt Stike Beacon Detected – 139[.]224[.]253[.]48:7777

Cobalt Stike Beacon Detected – 175[.]178[.]161[.]56:9005

Cobalt Stike Beacon Detected – 107[.]189[.]7[.]48:80

Cobalt Stike Beacon Detected – 112[.]74[.]46[.]161:8001

Cobalt Stike Beacon Detected – 121[.]5[.]234[.]90:8080

Cobalt Stike Beacon Detected – 139[.]198[.]122[.]88:666

Ethical Hacking and Penetration Testing: A Practical Guide to Secure Systems

[ALPHALOCKER] – Ransomware Victim: www[.]unterkofler[.]info

[ALPHALOCKER] – Ransomware Victim: www[.]automotiveml[.]com

Cobalt Strike Beacon Detected – 171[.]244[.]143[.]184:443

Cobalt Strike Beacon Detected – 115[.]190[.]178[.]249:7777

You may have missed