threatintel

Malware Analysis – djvu – d9001e295434d715d2d68cff6642425d

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d9001e295434d715d2d68cff6642425dSHA1: 042ddd3e3703cbaa81e22b72bcabbcdefc046670ANALYSIS DATE: 2022-10-22T21:20:43ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – 0483e20297a6c648111f3a79b352c71a

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0483e20297a6c648111f3a79b352c71aSHA1: 1b2a16253482595aca2c4b31b76f98846c7dfe12ANALYSIS DATE: 2022-10-22T21:12:59ZTTPS: T1060, T1112, T1082, T1053,...

Posh C2 Detected – 54[.]37[.]225[.]27:443

October 23, 2022

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

Malware Analysis – wannacry – ed2c789b87728fb5a71105c24348ab14

October 23, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: ed2c789b87728fb5a71105c24348ab14SHA1: c0efa6b71ffd0e12e48eee3697a2b4dc88afe47aANALYSIS DATE: 2022-10-22T22:40:19ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 22e8a12784b65287f97914473b4581fd

October 23, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 22e8a12784b65287f97914473b4581fdSHA1: f0901b6e57fb74484629f098e9509758ef7c4a48ANALYSIS DATE: 2022-10-22T22:00:21ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – da8ae748568d252c27af7457be7a4ab5

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: da8ae748568d252c27af7457be7a4ab5SHA1: 913b2268de16a4294c433f97bbb4439634f7b564ANALYSIS DATE: 2022-10-22T21:48:26ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – – 106bdbb47b30a477321b204108577744

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 106bdbb47b30a477321b204108577744SHA1: b177e0df659779ca1165b8b35cb7e09754129401ANALYSIS DATE: 2022-10-22T21:30:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Daixin Team targets health organizations with ransomware, US agencies warn

October 22, 2022

US government agencies warned that the Daixin Team cybercrime group is actively targeting the U.S. Healthcare and Public Health sector...

Malware Analysis – discovery – 443247892070b27552695efb25cbd370

October 22, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 443247892070b27552695efb25cbd370SHA1: 9994e9ff44bfa117ffe2f73b3f974a639f99d751ANALYSIS DATE: 2022-10-21T13:54:38ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – 7941708f058beca69eaf0f9d7618d020

October 22, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7941708f058beca69eaf0f9d7618d020SHA1: 0be04012482c6df1410db047523524e6b8aa9b8aANALYSIS DATE: 2022-10-21T14:19:14ZTTPS: T1082, T1112, T1060, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – persistence – 62da799689f1fa028572e529a36982a3

October 22, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 62da799689f1fa028572e529a36982a3SHA1: dbf2f865e0d1bab2613015312eaded00cfa60877ANALYSIS DATE: 2022-10-21T14:19:16ZTTPS: T1107, T1490, T1082, T1112, T1060 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – discovery – 1344621b4058158942a763ad534a01d0

October 22, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 1344621b4058158942a763ad534a01d0SHA1: a5577f6bbfdf07f8627a23946ff3147c6840668fANALYSIS DATE: 2022-10-21T13:54:04ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – e6dcc0d19c42acf6f8bc0a5fb295dc71

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: e6dcc0d19c42acf6f8bc0a5fb295dc71SHA1: b932cd7e0c43288444e34c7ad00639ae52b1e865ANALYSIS DATE: 2022-10-22T14:00:25ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – evasion – 13423360b8c1ffb02fac15d4f4c2b261

October 22, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 13423360b8c1ffb02fac15d4f4c2b261SHA1: b7bd5e7f2d7ef49967f921d263251bf2445a1ce8ANALYSIS DATE: 2022-10-21T14:20:10ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 35dddd354540c317a9b131af025fea15

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 35dddd354540c317a9b131af025fea15SHA1: f4077779d53f962c53674957feadc83cd718c124ANALYSIS DATE: 2022-10-22T14:10:44ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – persistence – 115c90fa3782f94e7beb2959903293bc

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 115c90fa3782f94e7beb2959903293bcSHA1: 1667f62eed47dfd608fe8f4b8b74b6a20b00a084ANALYSIS DATE: 2022-10-22T14:00:38ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – evasion – 9aac8706399f0fefe526d057ab9d8fdf

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: 9aac8706399f0fefe526d057ab9d8fdfSHA1: 3f128622b34f674ba42b755a51c26359f1dc093dANALYSIS DATE: 2022-10-22T14:40:17ZTTPS: T1057, T1082, T1053, T1107, T1490, T1112, T1031, T1012, T1120,...

Malware Analysis – persistence – 17c27a27f56d52944388c05f1dec03ec

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 17c27a27f56d52944388c05f1dec03ecSHA1: a3b268525772b10ca5d689ee2c2f4365334118d0ANALYSIS DATE: 2022-10-22T14:40:29ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – evasion – 674e7ee905d24a89af47b53b53ffc23c

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 674e7ee905d24a89af47b53b53ffc23cSHA1: c6b73b882aa1f4d46ec655a5591a28638700856cANALYSIS DATE: 2022-10-22T14:40:35ZTTPS: T1490, T1059, T1107, T1082, T1012, T1120, T1485 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 249d6385dc41bfefaca68f7dfb3abf5c

October 22, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 249d6385dc41bfefaca68f7dfb3abf5cSHA1: 11c38eb4c9e78541d2b8d2ef6b1564db23ffef5aANALYSIS DATE: 2022-10-22T14:32:20ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – a97a2672ce450c7b19b4896a20920c1a

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a97a2672ce450c7b19b4896a20920c1aSHA1: 80da6eacf1bcd363411567fa52087fa0b9fa085eANALYSIS DATE: 2022-10-22T14:50:55ZTTPS: T1053, T1005, T1081, T1060,...

Malware Analysis – persistence – 6445361212623df909ed2eae3f6c3da0

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6445361212623df909ed2eae3f6c3da0SHA1: 68b2e4ce362406d96f4577b857bf71cb1e4ecf65ANALYSIS DATE: 2022-10-22T15:00:40ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – – 5878ad161d87cd34f135096b374ecd74

October 22, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 5878ad161d87cd34f135096b374ecd74SHA1: aff8540b507ff58eaaadafff5e0a0bd241ee6b10ANALYSIS DATE: 2022-10-22T14:42:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 9d8c4e31390d8c425577eb8c485dad30

October 22, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9d8c4e31390d8c425577eb8c485dad30SHA1: 5894425efcd316df81e771caf84f0bf8b96a0251ANALYSIS DATE: 2022-10-22T14:45:04ZTTPS: T1082, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

threatintel

Malware Analysis – djvu – d9001e295434d715d2d68cff6642425d

Malware Analysis – djvu – 0483e20297a6c648111f3a79b352c71a

Posh C2 Detected – 54[.]37[.]225[.]27:443

Malware Analysis – wannacry – ed2c789b87728fb5a71105c24348ab14

Malware Analysis – wannacry – 22e8a12784b65287f97914473b4581fd

Malware Analysis – djvu – da8ae748568d252c27af7457be7a4ab5

Malware Analysis – – 106bdbb47b30a477321b204108577744

Daixin Team targets health organizations with ransomware, US agencies warn

Malware Analysis – discovery – 443247892070b27552695efb25cbd370

Malware Analysis – persistence – 7941708f058beca69eaf0f9d7618d020

Malware Analysis – persistence – 62da799689f1fa028572e529a36982a3

Malware Analysis – discovery – 1344621b4058158942a763ad534a01d0

Malware Analysis – persistence – e6dcc0d19c42acf6f8bc0a5fb295dc71

Malware Analysis – evasion – 13423360b8c1ffb02fac15d4f4c2b261

Malware Analysis – djvu – 35dddd354540c317a9b131af025fea15

Malware Analysis – persistence – 115c90fa3782f94e7beb2959903293bc

Malware Analysis – evasion – 9aac8706399f0fefe526d057ab9d8fdf

Malware Analysis – persistence – 17c27a27f56d52944388c05f1dec03ec

Malware Analysis – evasion – 674e7ee905d24a89af47b53b53ffc23c

Malware Analysis – ransomware – 249d6385dc41bfefaca68f7dfb3abf5c

Malware Analysis – djvu – a97a2672ce450c7b19b4896a20920c1a

Malware Analysis – persistence – 6445361212623df909ed2eae3f6c3da0

Malware Analysis – – 5878ad161d87cd34f135096b374ecd74

Malware Analysis – ransomware – 9d8c4e31390d8c425577eb8c485dad30

[RHYSIDA] – Ransomware Victim: Spindletop Center

[AKIRA] – Ransomware Victim: Apache OpenOffice

BugCrowd Bug Bounty Disclosure: P3 – Reflected XSS in `type` parameter on nlsp.nasa.gov – Marcel_Malaeb

[AKIRA] – Ransomware Victim: Econo-Pak

[RANSOMHOUSE] – Ransomware Victim: ASKUL

You may have missed