threatintel

Malware Analysis – ransomware – 8f4b9aca8df15a22d5ad0ba4ea1488cc

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8f4b9aca8df15a22d5ad0ba4ea1488ccSHA1: 1c6d6ffaa726980f645d7f89bf84f6f9c2715fe5ANALYSIS DATE: 2022-10-23T04:20:41ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – d278a12d260a48cb9ea30d45b58cbeed

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d278a12d260a48cb9ea30d45b58cbeedSHA1: eec6305462c6f946e44ad1cbcc72a7481c76a616ANALYSIS DATE: 2022-10-23T04:20:37ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – – 42ff22493f094600f2daa6a2984861a3

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 42ff22493f094600f2daa6a2984861a3SHA1: f992b95f7330bcd6416df64b24267cf979b7a151ANALYSIS DATE: 2022-10-23T04:20:57ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 1ff351a9c2dc8e54b71b3e7b00b1c54a

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 1ff351a9c2dc8e54b71b3e7b00b1c54aSHA1: 2e57d05585eaff7d3eb4f2eb229c433e86695fdeANALYSIS DATE: 2022-10-23T04:20:46ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – locky – 070dddf9d7c0afae4a8c5419e910d4e9

October 23, 2022

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, ransomwareMD5: 070dddf9d7c0afae4a8c5419e910d4e9SHA1: c5382329524a6f84ac08990634d311f2e1e90279ANALYSIS DATE: 2022-10-23T04:37:34ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – 8db6d3fbe634d9fcf41f15400d1f343c

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 8db6d3fbe634d9fcf41f15400d1f343cSHA1: bd3b9ca039850d187da1642121362ab743cf4f57ANALYSIS DATE: 2022-10-23T04:42:24ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 211ffba6d8fe29258dd740dbe6c19e08

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 211ffba6d8fe29258dd740dbe6c19e08SHA1: 525c901952fde8683850484524d252418e700e31ANALYSIS DATE: 2022-10-23T04:39:19ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – ransomware – 0841781ce334fa545cf5ced3df6b019d

October 23, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0841781ce334fa545cf5ced3df6b019dSHA1: 60089d8fe3993084aef5b6100bc4019675543294ANALYSIS DATE: 2022-10-23T04:41:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 54639aa125db4aebe41299332989f3a0

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, upxMD5: 54639aa125db4aebe41299332989f3a0SHA1: 068acdc404596d7941cf3ab35b90c1fff813913eANALYSIS DATE: 2022-10-21T17:29:44ZTTPS: T1082, T1012, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 13db9c3f1244dc2bdd0dca16dae87466

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 13db9c3f1244dc2bdd0dca16dae87466SHA1: 814564b8906a83139f1d8b987e75fd2bf7209f28ANALYSIS DATE: 2022-10-21T18:40:44ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – adware – 5bb9e6b6ee66206e848b5ae8e13a6050

October 23, 2022

Score: 9 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 5bb9e6b6ee66206e848b5ae8e13a6050SHA1: 0a43f6178692e21e40b248e5b3900b16ba844015ANALYSIS DATE: 2022-10-21T17:57:31ZTTPS: T1060, T1112, T1222, T1012, T1120, T1082,...

Malware Analysis – discovery – 10ee7cce9524e4d2720a32f8fea16010

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 10ee7cce9524e4d2720a32f8fea16010SHA1: d7e89b4db2324da4dec5d020946c2eb92484f4baANALYSIS DATE: 2022-10-21T17:47:15ZTTPS: T1222, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 27bbd42246a1822d33d2483c915cd660

October 23, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 27bbd42246a1822d33d2483c915cd660SHA1: f4e1809dfd77ee7e5867de325f7ae3c334f4a394ANALYSIS DATE: 2022-10-21T18:26:21ZTTPS: T1082, T1060, T1112, T1004, T1158, T1088,...

Cobalt Stike Beacon Detected – 194[.]195[.]213[.]31:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]248:80

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]243:443

October 23, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – ransomware – 42c6a6b16d75378eab14240084ae16f0

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 42c6a6b16d75378eab14240084ae16f0SHA1: 83031b984c12a0cb50d7882a450fe3fa85adc16fANALYSIS DATE: 2022-10-21T18:43:48ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 27c0ae51af391cf5d411e6aa790a7660

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 27c0ae51af391cf5d411e6aa790a7660SHA1: 07c2bdca3cebcb1725a76260a151f986ae3b5bb8ANALYSIS DATE: 2022-10-21T18:54:28ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 166a8cec83c5e620cfe57290754a14b6

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 166a8cec83c5e620cfe57290754a14b6SHA1: 302ad1ed3a3518db09a36e0093b9cd188d819874ANALYSIS DATE: 2022-10-21T19:07:27ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – cryptolocker – 5a4add9136f4bab32c9576ea03133c3e

October 23, 2022

Score: 10 MALWARE FAMILY: cryptolockerTAGS:family:cryptolocker, persistence, ransomwareMD5: 5a4add9136f4bab32c9576ea03133c3eSHA1: c72534ef23599b2801da50e2e7e5206c8c57ab1eANALYSIS DATE: 2022-10-21T18:47:47ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

threatintel

Malware Analysis – ransomware – 8f4b9aca8df15a22d5ad0ba4ea1488cc

Malware Analysis – ransomware – d278a12d260a48cb9ea30d45b58cbeed

Malware Analysis – – 42ff22493f094600f2daa6a2984861a3

Malware Analysis – ransomware – 1ff351a9c2dc8e54b71b3e7b00b1c54a

Malware Analysis – locky – 070dddf9d7c0afae4a8c5419e910d4e9

Malware Analysis – – 8db6d3fbe634d9fcf41f15400d1f343c

Malware Analysis – djvu – 211ffba6d8fe29258dd740dbe6c19e08

Malware Analysis – ransomware – 0841781ce334fa545cf5ced3df6b019d

Malware Analysis – discovery – 54639aa125db4aebe41299332989f3a0

Malware Analysis – discovery – 13db9c3f1244dc2bdd0dca16dae87466

Malware Analysis – adware – 5bb9e6b6ee66206e848b5ae8e13a6050

Malware Analysis – discovery – 10ee7cce9524e4d2720a32f8fea16010

Malware Analysis – evasion – 27bbd42246a1822d33d2483c915cd660

Cobalt Stike Beacon Detected – 194[.]195[.]213[.]31:80

Cobalt Stike Beacon Detected – 5[.]181[.]86[.]248:80

Cobalt Stike Beacon Detected – 5[.]8[.]18[.]243:443

Malware Analysis – ransomware – 42c6a6b16d75378eab14240084ae16f0

Malware Analysis – discovery – 27c0ae51af391cf5d411e6aa790a7660

Malware Analysis – discovery – 166a8cec83c5e620cfe57290754a14b6

Malware Analysis – cryptolocker – 5a4add9136f4bab32c9576ea03133c3e

Cobalt Stike Beacon Detected – 8[.]142[.]11[.]169:8888

Cobalt Stike Beacon Detected – 54[.]64[.]32[.]174:8080

Cobalt Stike Beacon Detected – 143[.]198[.]154[.]179:80

Cobalt Stike Beacon Detected – 37[.]1[.]215[.]252:443

[SINOBI] – Ransomware Victim: Post Ranch Inn

CVE Alert: CVE-2025-24893 – xwiki – xwiki-platform

CVE Alert: CVE-2025-41244 – VMware – VCF operations

[THEGENTLEMEN] – Ransomware Victim: Silverlake Axis

[AKIRA] – Ransomware Victim: Huber , Erickson & Bowman

You may have missed