threatintel

Malware Analysis – ransomware – e49d70b619a1220ebb880dc4f19f730c

October 25, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e49d70b619a1220ebb880dc4f19f730cSHA1: ef68f39b5908b8405ce55a51d6e3c599839c3cbbANALYSIS DATE: 2022-10-24T22:39:53ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 36171704cde087f839b10c2465d864e1

October 25, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 36171704cde087f839b10c2465d864e1SHA1: e3baa1c3ee9aa1d5ae61187be2e20ea9cb57d538ANALYSIS DATE: 2022-10-24T21:44:47ZTTPS: T1012, T1120, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – wannacry – eb3501049b53a503d67cbdf07a7cbdd7

October 25, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: eb3501049b53a503d67cbdf07a7cbdd7SHA1: f7419b49f425a0c4a3c2d2f5e7f82eee0754e247ANALYSIS DATE: 2022-10-24T22:40:27ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – ffa9d1cdccb22d5a686d1273992fe504

October 25, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ffa9d1cdccb22d5a686d1273992fe504SHA1: 825392c22a939c44fc3923dea1f7c6d603b17964ANALYSIS DATE: 2022-10-24T22:40:22ZTTPS: T1005, T1081, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – 984db2d337c7a1f8c7eee662382d5354

October 25, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 984db2d337c7a1f8c7eee662382d5354SHA1: 235415861f9b9be9e2413fc5c2ce8d34122a2f76ANALYSIS DATE: 2022-10-24T22:40:17ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 3e6df41f4e8aa4d85f0d6ca7cf9f3069

October 25, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: 3e6df41f4e8aa4d85f0d6ca7cf9f3069SHA1: 279f1cd5a405a217fc2d99f8ddcdfa3fb0198008ANALYSIS DATE: 2022-10-24T22:40:26ZTTPS: T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Apple fixed the ninth actively exploited zero-day this year

October 24, 2022

Apple released security updates that addressed the ninth zero-day vulnerability actively exploited in the wild since the start of the...

Uncovering Security Blind Spots in CNC Machines

October 24, 2022

Industry 4.0 has given rise to smart factories that have markedly improved machining processes, but it has also opened the...

US-CERT Bulletin (SB22-297):Vulnerability Summary for the Week of October 17, 2022

October 24, 2022

The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards...

Cuba ransomware affiliate targets Ukraine, CERT-UA warns

October 24, 2022

The Ukraine Computer Emergency Response Team (CERT-UA) warns of Cuba Ransomware attacks against critical networks in the country. The Ukraine...

LockBit 3.0 Ransomware Victim: pendragonplc[.]com

October 24, 2022

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Norway PM warns of Russia cyber threat to oil and gas industry

October 24, 2022

Norway ’s prime minister warned last week that Russia poses “a real and serious threat” to the country’s oil and...

Digital Binary Code on Dark Red Background. Data Breach

Doomworld – 34,478 breached accounts

October 24, 2022

In October 2022, the Doomworld fourm suffered a data breach that exposed 34k member records. The data included email and...

E-Pal – 108,887 breached accounts

October 24, 2022

In October 2022, the service dedicated to finding friends on Discord known as E-Pal disclosed a data breach. The compromised...

Bomber – Scans Software Bill Of Materials (SBOMs) For Security Vulnerabilities

October 24, 2022

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill...

Malicious Clicker apps in Google Play have 20M+ installs

October 24, 2022

Researchers discovered 16 malicious clicker apps in the official Google Play store that were downloaded by 20M+ users. Security researchers...

Cobalt Stike Beacon Detected – 104[.]194[.]243[.]238:443

October 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]104[.]157:666

October 24, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – 087959df184f872b78f878ec08468cf3

October 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 087959df184f872b78f878ec08468cf3SHA1: 64d40e5f89104dff61c2e142c5acc24252e9a215ANALYSIS DATE: 2022-10-24T08:16:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 3c34bab015acf45fa967c6791c7d3008

October 24, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 3c34bab015acf45fa967c6791c7d3008SHA1: 809cae36f97ec02da41be75e94d09ff109bd7702ANALYSIS DATE: 2022-10-24T08:32:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – e5477b2c7ef4fb0b73e4230664296c76

October 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e5477b2c7ef4fb0b73e4230664296c76SHA1: d481b394959e77d195aacb6a046c5b34ee221aa4ANALYSIS DATE: 2022-10-24T08:48:14ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – ransomware – e49d70b619a1220ebb880dc4f19f730c

Malware Analysis – ransomware – 36171704cde087f839b10c2465d864e1

Malware Analysis – wannacry – eb3501049b53a503d67cbdf07a7cbdd7

Malware Analysis – ransomware – ffa9d1cdccb22d5a686d1273992fe504

Malware Analysis – ransomware – 984db2d337c7a1f8c7eee662382d5354

Malware Analysis – ransomware – 3e6df41f4e8aa4d85f0d6ca7cf9f3069

Apple fixed the ninth actively exploited zero-day this year

Uncovering Security Blind Spots in CNC Machines

US-CERT Bulletin (SB22-297):Vulnerability Summary for the Week of October 17, 2022

Cuba ransomware affiliate targets Ukraine, CERT-UA warns

LockBit 3.0 Ransomware Victim: pendragonplc[.]com

Norway PM warns of Russia cyber threat to oil and gas industry

Doomworld – 34,478 breached accounts

E-Pal – 108,887 breached accounts

Bomber – Scans Software Bill Of Materials (SBOMs) For Security Vulnerabilities

Malicious Clicker apps in Google Play have 20M+ installs

Cobalt Stike Beacon Detected – 104[.]194[.]243[.]238:443

Cobalt Stike Beacon Detected – 43[.]138[.]104[.]157:666

Malware Analysis – smokeloader – 087959df184f872b78f878ec08468cf3

Malware Analysis – – 3c34bab015acf45fa967c6791c7d3008

Malware Analysis – smokeloader – e5477b2c7ef4fb0b73e4230664296c76

Cobalt Stike Beacon Detected – 101[.]34[.]76[.]186:80

Cobalt Stike Beacon Detected – 37[.]1[.]215[.]252:80

Cobalt Stike Beacon Detected – 137[.]184[.]7[.]253:80

[INCRANSOM] – Ransomware Victim: VZW Avalon

Ai Layoffs To Backfire: Half Quietly Rehired At Lower Pay

[BLACKSHRANTAC] – Ransomware Victim: The Matlusky Firm LLC

[QILIN] – Ransomware Victim: bagnoles[.]nl

[BLACKSHRANTAC] – Ransomware Victim: ApleNet Co[.], Ltd

You may have missed