threatintel

Malware Analysis – – 9ece65fbf12f89c9ac55726d98293b57

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 9ece65fbf12f89c9ac55726d98293b57SHA1: 7bc9b3c3b6f494fe6ca825e243f8f8fe4443b1baANALYSIS DATE: 2022-10-22T15:45:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 5e8701f9d6624a53e5e6a67457ca45b2

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5e8701f9d6624a53e5e6a67457ca45b2SHA1: 8b1e95c8ee61b2a685ad936081e6bdd4c7e0b8e1ANALYSIS DATE: 2022-10-22T15:24:08ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – locky – f63462259d9fbe411e276f137bcb74d4

October 22, 2022

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, ransomwareMD5: f63462259d9fbe411e276f137bcb74d4SHA1: 5dc4433eedfa45bfd78ce002f92bd9cd47f30d71ANALYSIS DATE: 2022-10-22T15:43:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – c9489c311cef8e2fd8b25202625f8300

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: c9489c311cef8e2fd8b25202625f8300SHA1: fc8278fc91cfe0adb178db023a05be60da51a877ANALYSIS DATE: 2022-10-22T15:05:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 94d087166651c0020a9e6cc2fdacdc0c

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 94d087166651c0020a9e6cc2fdacdc0cSHA1: 99be22569ba9b1e49d3fd36f65faa6795672fcc0ANALYSIS DATE: 2022-10-22T16:09:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 518f3241ce41625209cdf7ad8567cf56

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 518f3241ce41625209cdf7ad8567cf56SHA1: bc772f5402c5c1337850a0dc421163fe606e9c88ANALYSIS DATE: 2022-10-22T16:01:55ZTTPS: T1060, T1112, T1222, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – – e3a8a1f4f9bf5c7cc0e7da7e575cb842

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: e3a8a1f4f9bf5c7cc0e7da7e575cb842SHA1: 2edfd6857178311b4858405613039f116cd59072ANALYSIS DATE: 2022-10-22T15:55:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – ac7a356c77073104d0971b6945815bae

October 22, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ac7a356c77073104d0971b6945815baeSHA1: 64c9290a69f2b7e9b74eeb53642659def971d9d3ANALYSIS DATE: 2022-10-22T16:05:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – b492f211c6e0e7dd13d9019219223510

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:nam7, botnet:slovarikinstalls, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – djvu – 80128ee42236ecc94d0a477e9a26f6b0

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 80128ee42236ecc94d0a477e9a26f6b0SHA1: 31cc39fd0dc6b973c2129fd882330dcf1ef010f6ANALYSIS DATE: 2022-10-22T16:27:11ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – 90a0d198ea42fd35ddc35f8622febb15

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 90a0d198ea42fd35ddc35f8622febb15SHA1: 935c10f36cb85dee7607ab5e3fb8306609544c91ANALYSIS DATE: 2022-10-22T16:21:57ZTTPS: T1222, T1053, T1012, T1060,...

Malware Analysis – dcrat – 022bc47a7232fed736eb97c1399d0d71

October 22, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:nam7, botnet:slovarikinstalls, backdoor, collection, discovery, infostealer, persistence, ransomware, rat,...

Threat actors exploit critical flaw in VMware Workspace ONE Access to drop ransomware, miners

October 22, 2022

Threat actors are exploiting a now-patched vulnerability, tracked as CVE-2022-22954, in VMware Workspace ONE Access in attacks in the wild....

Usbsas – Tool And Framework For Securely Reading Untrusted USB Mass Storage Devices

October 22, 2022

usbsas is a free and open source (GPLv3) tool and framework for securely reading untrusted USB mass storage devices. Description...

Malware Analysis – – 5199b690874c0baa375855e37789569e

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 5199b690874c0baa375855e37789569eSHA1: ce65f46da270330e66da4fa879932f091f01fcc9ANALYSIS DATE: 2022-10-22T07:59:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 206[.]2[.]200[.]132:443

October 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – play – 5dcfb98d5adf722424420d02377cee54

October 22, 2022

Score: 10 MALWARE FAMILY: playTAGS:family:play, ransomwareMD5: 5dcfb98d5adf722424420d02377cee54SHA1: d999c810fa88dcedebd45e0a83d08ec6cd49e871ANALYSIS DATE: 2022-10-22T08:06:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 49b36093a491b1b625066d3f2bcb9964

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 49b36093a491b1b625066d3f2bcb9964SHA1: fafe05e1978dedac0d3f781101acde8bf33ea1dfANALYSIS DATE: 2022-10-22T08:20:36ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – d4ce2b268bde19084d1b359d3a4829b3

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d4ce2b268bde19084d1b359d3a4829b3SHA1: 2a4db50d36a2832f5da23ec258b8eec7cbda626aANALYSIS DATE: 2022-10-22T08:06:58ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – danabot – 7fbe91ac75b84e34eef686ccf1322f25

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 7fbe91ac75b84e34eef686ccf1322f25SHA1: d57422b77bee807b3e5df377abb7fcb187bfa5bcANALYSIS...

threatintel

Malware Analysis – – 9ece65fbf12f89c9ac55726d98293b57

Malware Analysis – djvu – 5e8701f9d6624a53e5e6a67457ca45b2

Malware Analysis – locky – f63462259d9fbe411e276f137bcb74d4

Malware Analysis – – c9489c311cef8e2fd8b25202625f8300

Malware Analysis – – 94d087166651c0020a9e6cc2fdacdc0c

Malware Analysis – djvu – 518f3241ce41625209cdf7ad8567cf56

Malware Analysis – – e3a8a1f4f9bf5c7cc0e7da7e575cb842

Malware Analysis – evasion – ac7a356c77073104d0971b6945815bae

Malware Analysis – djvu – b492f211c6e0e7dd13d9019219223510

Malware Analysis – djvu – 80128ee42236ecc94d0a477e9a26f6b0

Malware Analysis – djvu – 90a0d198ea42fd35ddc35f8622febb15

Malware Analysis – dcrat – 022bc47a7232fed736eb97c1399d0d71

Threat actors exploit critical flaw in VMware Workspace ONE Access to drop ransomware, miners

Usbsas – Tool And Framework For Securely Reading Untrusted USB Mass Storage Devices

Malware Analysis – – 5199b690874c0baa375855e37789569e

Cobalt Stike Beacon Detected – 206[.]2[.]200[.]132:443

Malware Analysis – play – 5dcfb98d5adf722424420d02377cee54

Malware Analysis – djvu – 49b36093a491b1b625066d3f2bcb9964

Malware Analysis – djvu – d4ce2b268bde19084d1b359d3a4829b3

Malware Analysis – danabot – 7fbe91ac75b84e34eef686ccf1322f25

Cobalt Stike Beacon Detected – 47[.]100[.]47[.]35:80

Cobalt Stike Beacon Detected – 1[.]13[.]176[.]232:80

Cobalt Stike Beacon Detected – 47[.]243[.]236[.]221:4443

Cobalt Stike Beacon Detected – 106[.]13[.]54[.]144:8010

[RHYSIDA] – Ransomware Victim: Spindletop Center

[AKIRA] – Ransomware Victim: Apache OpenOffice

BugCrowd Bug Bounty Disclosure: P3 – Reflected XSS in `type` parameter on nlsp.nasa.gov – Marcel_Malaeb

[AKIRA] – Ransomware Victim: Econo-Pak

[RANSOMHOUSE] – Ransomware Victim: ASKUL

You may have missed