threatintel

Malware Analysis – smokeloader – 10c99182d57491a027c5076cd44335c1

October 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 10c99182d57491a027c5076cd44335c1SHA1: 8c974b87d9775a0e46ff85dc0568c744025d64e6ANALYSIS DATE: 2022-10-27T03:56:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 83933185e5656575fe510b8bc1cca915

October 27, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 83933185e5656575fe510b8bc1cca915SHA1: af3b20beb325aea6d5e3d1d66221dafb6d37deb9ANALYSIS DATE: 2022-10-27T03:41:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – ac32adc8f77455a006a8b52b3033e35f

October 27, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ac32adc8f77455a006a8b52b3033e35fSHA1: 14c6c468e8fc78d4c47d64a56ca084656eb199f9ANALYSIS DATE: 2022-10-27T04:12:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 172e691d5f86fb163eb042a84eac1e6b

October 27, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 172e691d5f86fb163eb042a84eac1e6bSHA1: 4de779d1f1537d4d43d1e831cc6ed00da4828629ANALYSIS DATE: 2022-10-27T03:44:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – avaddon – 0b486fe0503524cfe4726a4022fa6a68

October 27, 2022

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, ransomware, trojanMD5: 0b486fe0503524cfe4726a4022fa6a68SHA1: 297dea71d489768ce45d23b0f8a45424b469ab00ANALYSIS DATE: 2022-10-27T04:17:35ZTTPS: T1082, T1088, T1089, T1112, T1012, T1120, T1107, T1490...

Malware Analysis – ransomware – e617881e9b1dcca928c637140591c2c0

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e617881e9b1dcca928c637140591c2c0SHA1: 4eb4e33110ef6d4f98585a343e5743c2f832ac6bANALYSIS DATE: 2022-10-27T04:20:21ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – be19d82d2071cf1c707cd1b18753f39f

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: be19d82d2071cf1c707cd1b18753f39fSHA1: 9256c17fbcfa2981605dec7c90f7c767f1277170ANALYSIS DATE: 2022-10-27T04:20:17ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – jigsaw – 1ff8649e8f8d0652d583b9a648161d3f

October 27, 2022

Score: 10 MALWARE FAMILY: jigsawTAGS:family:jigsaw, persistence, ransomware, spyware, stealerMD5: 1ff8649e8f8d0652d583b9a648161d3fSHA1: 3441ff983221742ed460f8310e49203b5dc59a15ANALYSIS DATE: 2022-10-27T04:15:38ZTTPS: T1060, T1112, T1082, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – ransomware – 59534fc3da8ff1798232c4aed7ab30c0

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 59534fc3da8ff1798232c4aed7ab30c0SHA1: 9658815565b5a47e2b6b622e2a3c172acbf6763bANALYSIS DATE: 2022-10-27T04:20:32ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 23320e81460058bcc65f438577af347d

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 23320e81460058bcc65f438577af347dSHA1: c6b711abcdb0a389ce54d51e5c71f1168934c9b5ANALYSIS DATE: 2022-10-27T04:20:36ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – maze – f83fb9ce6a83da58b20685c1d7e1e546

October 27, 2022

Score: 10 MALWARE FAMILY: mazeTAGS:family:maze, ransomware, spyware, stealer, trojanMD5: f83fb9ce6a83da58b20685c1d7e1e546SHA1: 01c459b549c1c2a68208d38d4ba5e36d29212a4fANALYSIS DATE: 2022-10-27T04:32:20ZTTPS: T1491, T1112, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – ransomware – cca7e39335f765ca4cf7e2a96f28bb5b

October 27, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: cca7e39335f765ca4cf7e2a96f28bb5bSHA1: 9a393bda893f203d28498ad7eccd7bef7c0894acANALYSIS DATE: 2022-10-27T04:20:26ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

OpenSSL to fix the second critical flaw ever

October 27, 2022

The OpenSSL Project announced an upcoming update to address a critical vulnerability in the open-source toolkit. The OpenSSL Project announced...

Malware Analysis – djvu – b71c28a6e77add43758eda3512216036

October 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – evasion – 207e6f51489a897991888a38efa3acd6

October 27, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealerMD5: 207e6f51489a897991888a38efa3acd6SHA1: 1fb9b8115d74cf38d6a90b9049c73ea6eb743643ANALYSIS DATE: 2022-10-26T20:22:48ZTTPS: T1059, T1107, T1490, T1005, T1081, T1491, T1112,...

Malware Analysis – – f9eeabbdcd2b69c5955d4eb2c59ba017

October 27, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: f9eeabbdcd2b69c5955d4eb2c59ba017SHA1: 698ccfd708451b56bc2007af6037208c06cad3eeANALYSIS DATE: 2022-10-26T20:07:40ZTTPS: T1053 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – wannacry – 5dbe26f60dc72ad662285665618fcf7e

October 27, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 5dbe26f60dc72ad662285665618fcf7eSHA1: 1100ca6718c317568e3e86a545a7167af863f469ANALYSIS DATE: 2022-10-26T20:20:22ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – f5e72bf445387eddec000e0238adf873

October 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealerMD5: f5e72bf445387eddec000e0238adf873SHA1: 895eb3047e7a28ce219fdd7e7ad5ce2a61312d93ANALYSIS DATE: 2022-10-26T20:22:20ZTTPS: T1059, T1107, T1490, T1060, T1112, T1012, T1120,...

Malware Analysis – smokeloader – e2877d46f4d7f96d20ae5913afff60ae

October 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e2877d46f4d7f96d20ae5913afff60aeSHA1: 66746e6642dcd7a910466e141b3e869c9c9be362ANALYSIS DATE: 2022-10-26T20:59:47ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – f685cd39636a0862009737be04556cce

October 27, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: f685cd39636a0862009737be04556cceSHA1: 886aeae78c659952c0862d323da361c28761d711ANALYSIS DATE: 2022-10-26T22:13:49ZTTPS: T1012, T1082, T1057 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – 61878d186ed8e369f6122847aac6927c

October 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 61878d186ed8e369f6122847aac6927cSHA1: 011cbc8c2b04e0fe73d9cfa06869099b0ccc1d9eANALYSIS DATE: 2022-10-26T21:46:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 9cb5b0bec4a9172fe2299ebb0cc2be86

October 27, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 9cb5b0bec4a9172fe2299ebb0cc2be86SHA1: 8f5691556fbac1a36b99796b9d4e1683781c15a6ANALYSIS DATE: 2022-10-26T20:57:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 198[.]44[.]140[.]97:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]190[.]72:443

October 27, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

threatintel

Malware Analysis – smokeloader – 10c99182d57491a027c5076cd44335c1

Malware Analysis – evasion – 83933185e5656575fe510b8bc1cca915

Malware Analysis – evasion – ac32adc8f77455a006a8b52b3033e35f

Malware Analysis – evasion – 172e691d5f86fb163eb042a84eac1e6b

Malware Analysis – avaddon – 0b486fe0503524cfe4726a4022fa6a68

Malware Analysis – ransomware – e617881e9b1dcca928c637140591c2c0

Malware Analysis – ransomware – be19d82d2071cf1c707cd1b18753f39f

Malware Analysis – jigsaw – 1ff8649e8f8d0652d583b9a648161d3f

Malware Analysis – ransomware – 59534fc3da8ff1798232c4aed7ab30c0

Malware Analysis – ransomware – 23320e81460058bcc65f438577af347d

Malware Analysis – maze – f83fb9ce6a83da58b20685c1d7e1e546

Malware Analysis – ransomware – cca7e39335f765ca4cf7e2a96f28bb5b

OpenSSL to fix the second critical flaw ever

Malware Analysis – djvu – b71c28a6e77add43758eda3512216036

Malware Analysis – evasion – 207e6f51489a897991888a38efa3acd6

Malware Analysis – – f9eeabbdcd2b69c5955d4eb2c59ba017

Malware Analysis – wannacry – 5dbe26f60dc72ad662285665618fcf7e

Malware Analysis – evasion – f5e72bf445387eddec000e0238adf873

Malware Analysis – smokeloader – e2877d46f4d7f96d20ae5913afff60ae

Malware Analysis – discovery – f685cd39636a0862009737be04556cce

Malware Analysis – smokeloader – 61878d186ed8e369f6122847aac6927c

Malware Analysis – – 9cb5b0bec4a9172fe2299ebb0cc2be86

Cobalt Stike Beacon Detected – 198[.]44[.]140[.]97:443

Cobalt Stike Beacon Detected – 84[.]32[.]190[.]72:443

[BLACKSHRANTAC] – Ransomware Victim: CCI Tax Pros, Inc

[ALPHALOCKER] – Ransomware Victim: www[.]verdugohillsdental[.]com

[INCRANSOM] – Ransomware Victim: aa-llp[.]com (aa[.]law)

[SAFEPAY] – Ransomware Victim: holtzofficesupport[.]com

[CLOP] – Ransomware Victim: MASTEC[.]COM

You may have missed