threatintel

Malware Analysis – persistence – 6f66102d811e4103ccfed34ec1baab4a

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6f66102d811e4103ccfed34ec1baab4aSHA1: f2a6a1e87f8d235eebfd457cab125423082fb49dANALYSIS DATE: 2022-10-21T15:40:23ZTTPS: T1091, T1060, T1112, T1005, T1081, T1082, T1107, T1490...

Malware Analysis – djvu – 07dd31fa45db1cc31252b872abc8c7af

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 07dd31fa45db1cc31252b872abc8c7afSHA1: 9643a41fef4af18b35b53c6671627debd88ec289ANALYSIS DATE: 2022-10-21T15:51:19ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – ransomware – a17412928dcd361f5e5da505949af250

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a17412928dcd361f5e5da505949af250SHA1: 155f2671b5311cde3d946e4b0e5685f1f9f5ea69ANALYSIS DATE: 2022-10-21T15:40:27ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 10eb8999dd0c04774fb0998f80387dc0

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojan, upxMD5: 10eb8999dd0c04774fb0998f80387dc0SHA1: 7e53b412a5ee3a9914be897ff6454c04993c4b36ANALYSIS DATE: 2022-10-21T16:09:34ZTTPS: T1082, T1112, T1031, T1004, T1088, T1089,...

Malware Analysis – xorist – 177068f72d69a4594bc3721fc9c1d6f0

October 21, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 177068f72d69a4594bc3721fc9c1d6f0SHA1: a24fe2857a2386e2413afa1c7476110cfa7319b9ANALYSIS DATE: 2022-10-21T16:09:32ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 49ade3a18ead1ef1a4d92fb85605275c

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 49ade3a18ead1ef1a4d92fb85605275cSHA1: d2d2440959b3609a219508963f647ff4a821be22ANALYSIS DATE: 2022-10-21T16:04:39ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – persistence – d9d9419893fff428ee7efbeb334caa79

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: d9d9419893fff428ee7efbeb334caa79SHA1: b4cd590c102d27a606e0216f7dc55f0dc8793bf9ANALYSIS DATE: 2022-10-21T16:20:38ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – djvu – 456ba4280563e40da987d3402b777dfa

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 456ba4280563e40da987d3402b777dfaSHA1: 0bbdcd4173bfafede77339d638cfb9c74bccf957ANALYSIS DATE: 2022-10-21T16:21:03ZTTPS: T1130, T1112, T1060, T1222,...

Malware Analysis – persistence – a17d57f69b585a9af21e3ad4751b8047

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: a17d57f69b585a9af21e3ad4751b8047SHA1: fb6090d22df4eefd39153b69ab699acee762d5e0ANALYSIS DATE: 2022-10-21T16:20:46ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – 0730e83e8eb11be6f0fbec767a019dce

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 0730e83e8eb11be6f0fbec767a019dceSHA1: a57fed25aed84a8fefb5b0aec9d8aec52d8edb2cANALYSIS DATE: 2022-10-21T16:20:57ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – ransomware – c8bd518dd425e24d3b578ca184d7c90e

October 21, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c8bd518dd425e24d3b578ca184d7c90eSHA1: 0daf5073589b94194042a59b31dd9716a71f86feANALYSIS DATE: 2022-10-21T16:20:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

CISA: Cisco Releases Security Update for Cisco Identity Services Engine

October 21, 2022

Cisco Releases Security Update for Cisco Identity Services Engine Cisco has released a security update to address vulnerabilities affecting Cisco...

Malware Analysis – smokeloader – 63432d6ad5779ea84f3cc02914b27ad1

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 63432d6ad5779ea84f3cc02914b27ad1SHA1: 460c1eea03a2244e91522e55f6ccbcbb1957a98eANALYSIS DATE: 2022-10-21T16:21:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dharma – 1b388741ab70e4898b198d761b876e21

October 21, 2022

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 1b388741ab70e4898b198d761b876e21SHA1: d0d0ddb943c8dfab4377923875b6fec293f424cdANALYSIS DATE: 2022-10-21T16:40:12ZTTPS: T1060, T1112, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – 1e7428a5338a36f3139142eea4cd7501

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1e7428a5338a36f3139142eea4cd7501SHA1: 665b0fee184d48456b10ed478a212f05c41c9e8dANALYSIS DATE: 2022-10-21T16:21:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 6704beef0806f273511c7593433ac6f3

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6704beef0806f273511c7593433ac6f3SHA1: d89e660135ba404bba24c2b8fe41b811f531ab46ANALYSIS DATE: 2022-10-21T16:37:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

CISA adds Linux kernel flaw CVE-2021-3493 to its Known Exploited Vulnerabilities Catalog

October 21, 2022

CISA added a Linux kernel vulnerability, tracked as CVE-2021-3493, to its Known Exploited Vulnerabilities Catalog. The U.S. Cybersecurity and Infrastructure Security...

MHDDoS – DDoS Attack Script With 56 Methods

October 21, 2022

OVH | Bypass OVH RHEX | Random HEX STOMP | Bypass chk_captcha STRESS | Send HTTP Packet With High Byte...

GUAC – A Google Open Source Project to secure software supply chain

October 21, 2022

Google launched the Graph for the Understanding Artifact Composition (GUAC) project, to secure the software supply chain. Google this week launched a...

Malware Analysis – evasion – 4a7c374dad91f035b53c883daa47c962

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4a7c374dad91f035b53c883daa47c962SHA1: 90f086c1cb3ea51cd6812013fb0882627421139cANALYSIS DATE: 2022-10-21T02:17:18ZTTPS: T1060, T1112, T1004, T1082, T1091, T1491, T1088, T1089,...

Malware Analysis – evasion – 1fc14f1b4c28868bd794c50bd750b931

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 1fc14f1b4c28868bd794c50bd750b931SHA1: 1d1ad3a831058f4946a8c63f7da73223e1a6c914ANALYSIS DATE: 2022-10-21T02:17:20ZTTPS: T1060, T1112, T1042, T1158, T1082, T1012, T1120, T1491,...

Malware Analysis – evasion – 4b0f8003abcc787d4efe43dd160d8e2b

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4b0f8003abcc787d4efe43dd160d8e2bSHA1: 9f0db3155862ea30b3c6e2ce9ccc43d4e28ecf58ANALYSIS DATE: 2022-10-21T02:17:25ZTTPS: T1082, T1012, T1120, T1060, T1112, T1042, T1088, T1089,...

Malware Analysis – evasion – 4c4b821ad0b7b56d3140642dd8b38130

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4c4b821ad0b7b56d3140642dd8b38130SHA1: 3813f159da1a1db846bdeef7908b9573d8a9a2bfANALYSIS DATE: 2022-10-21T02:17:27ZTTPS: T1012, T1120, T1082, T1060, T1112, T1088, T1089, T1091,...

Malware Analysis – evasion – 7c25d13bdb003c74b0aa93033c9d506d

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 7c25d13bdb003c74b0aa93033c9d506dSHA1: 1b1e69548ab251e9212e900050aa4f43c690442bANALYSIS DATE: 2022-10-21T02:17:22ZTTPS: T1491, T1112, T1060, T1082, T1004, T1042, T1490, T1091,...

threatintel

Malware Analysis – persistence – 6f66102d811e4103ccfed34ec1baab4a

Malware Analysis – djvu – 07dd31fa45db1cc31252b872abc8c7af

Malware Analysis – ransomware – a17412928dcd361f5e5da505949af250

Malware Analysis – evasion – 10eb8999dd0c04774fb0998f80387dc0

Malware Analysis – xorist – 177068f72d69a4594bc3721fc9c1d6f0

Malware Analysis – djvu – 49ade3a18ead1ef1a4d92fb85605275c

Malware Analysis – persistence – d9d9419893fff428ee7efbeb334caa79

Malware Analysis – djvu – 456ba4280563e40da987d3402b777dfa

Malware Analysis – persistence – a17d57f69b585a9af21e3ad4751b8047

Malware Analysis – persistence – 0730e83e8eb11be6f0fbec767a019dce

Malware Analysis – ransomware – c8bd518dd425e24d3b578ca184d7c90e

CISA: Cisco Releases Security Update for Cisco Identity Services Engine

Malware Analysis – smokeloader – 63432d6ad5779ea84f3cc02914b27ad1

Malware Analysis – dharma – 1b388741ab70e4898b198d761b876e21

Malware Analysis – smokeloader – 1e7428a5338a36f3139142eea4cd7501

Malware Analysis – evasion – 6704beef0806f273511c7593433ac6f3

CISA adds Linux kernel flaw CVE-2021-3493 to its Known Exploited Vulnerabilities Catalog

MHDDoS – DDoS Attack Script With 56 Methods

GUAC – A Google Open Source Project to secure software supply chain

Malware Analysis – evasion – 4a7c374dad91f035b53c883daa47c962

Malware Analysis – evasion – 1fc14f1b4c28868bd794c50bd750b931

Malware Analysis – evasion – 4b0f8003abcc787d4efe43dd160d8e2b

Malware Analysis – evasion – 4c4b821ad0b7b56d3140642dd8b38130

Malware Analysis – evasion – 7c25d13bdb003c74b0aa93033c9d506d

[QILIN] – Ransomware Victim: bagnoles[.]nl

[BLACKSHRANTAC] – Ransomware Victim: ApleNet Co[.], Ltd

[QILIN] – Ransomware Victim: Disseny Dental

Cobalt Strike Beacon Detected – 196[.]251[.]69[.]253:4433

Cobalt Strike Beacon Detected – 124[.]223[.]114[.]203:4433

You may have missed