threatintel

Malware Analysis – danabot – 34dac80c97059a81bd409cb658666582

October 21, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, backdoor, banker, collection, discovery, persistence, ransomware, trojanMD5: 34dac80c97059a81bd409cb658666582SHA1: 037e1563852f7e3e9febcadaf9a14f45ffcd66daANALYSIS DATE: 2022-10-21T09:33:16ZTTPS: T1082, T1012,...

Malware Analysis – djvu – 5b8713487da08ae104fc4b80f7c7fa90

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5b8713487da08ae104fc4b80f7c7fa90SHA1: de2f46346055d9a21e4a20db6d63e3cd16a2a8bcANALYSIS DATE: 2022-10-21T09:48:52ZTTPS: T1053, T1012, T1005, T1081,...

Malware Analysis – djvu – fef7cf385ca2cce744b82dd651f86db4

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: fef7cf385ca2cce744b82dd651f86db4SHA1: 68444a895fde67f7b9a8db6bb17d5c02cb704552ANALYSIS DATE: 2022-10-21T09:26:31ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – f52b4e894b2d577073ef81610150e2a4

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f52b4e894b2d577073ef81610150e2a4SHA1: b3aa05260ad6b0cb6c3cd8705968e8e5d8ebb46bANALYSIS DATE: 2022-10-21T09:36:43ZTTPS: T1012, T1005, T1081, T1222,...

Cobalt Stike Beacon Detected – 20[.]73[.]54[.]98:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]14[.]60[.]232:5555

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]208[.]74[.]203:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 149[.]255[.]132[.]91:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – phobos – d5babdaf2abe7ba35c9443f1ca6f8cfa

October 21, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: d5babdaf2abe7ba35c9443f1ca6f8cfaSHA1: cb77b68d92d0df3e185dcb648731514c5911dcdcANALYSIS DATE: 2022-10-21T10:49:10ZTTPS: T1490, T1059, T1107, T1005, T1081, T1060,...

Malware Analysis – persistence – 8e73c9ecd37de547e94de6a044157bd2

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 8e73c9ecd37de547e94de6a044157bd2SHA1: e3fedb5b0a431aab1af78e4f62481f48332ad6e7ANALYSIS DATE: 2022-10-21T10:40:17ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – persistence – f5aa35a4b633fa7911c31abfcbeecdcf

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: f5aa35a4b633fa7911c31abfcbeecdcfSHA1: 84b7fe9020299ce4e7d73745e197af029d93a906ANALYSIS DATE: 2022-10-21T10:40:22ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – ransomware – cde3f2732fcf5a3b990fd6e33c6757cf

October 21, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: cde3f2732fcf5a3b990fd6e33c6757cfSHA1: 3e6903a3635ae53207bfdbc98119860e924fe839ANALYSIS DATE: 2022-10-21T10:18:59ZTTPS: T1012, T1082, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Black Basta Ransomware Victim: Diamond Mowers

October 21, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: ALRO

October 21, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: EDC3

October 21, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: J[.]M[.] Rodgers Co[.]

October 21, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: STONE1

October 21, 2022

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 144[.]126[.]221[.]80:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]63:80

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 18[.]184[.]235[.]54:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]99:8080

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – 21f326eef6fda2c5d544c2b5e6d21f34

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 21f326eef6fda2c5d544c2b5e6d21f34SHA1: c6d5a6a665ebaa80d1174ca3850f7af509bd027bANALYSIS DATE: 2022-10-21T10:51:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – f05d8588cf2e8be9fa6ccac39a0f7311

October 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: f05d8588cf2e8be9fa6ccac39a0f7311SHA1: eddfb1947ce609cf33c1409f5977ea78ecaf0f32ANALYSIS DATE: 2022-10-21T10:51:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 9d3ca081e7fe27e44707d8634c22fc95

October 21, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9d3ca081e7fe27e44707d8634c22fc95SHA1: dc0220f9a43989a4628f4eabd5e963fd80d8f698ANALYSIS DATE: 2022-10-21T10:51:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

threatintel

Malware Analysis – danabot – 34dac80c97059a81bd409cb658666582

Malware Analysis – djvu – 5b8713487da08ae104fc4b80f7c7fa90

Malware Analysis – djvu – fef7cf385ca2cce744b82dd651f86db4

Malware Analysis – djvu – f52b4e894b2d577073ef81610150e2a4

Cobalt Stike Beacon Detected – 20[.]73[.]54[.]98:80

Cobalt Stike Beacon Detected – 1[.]14[.]60[.]232:5555

Cobalt Stike Beacon Detected – 104[.]208[.]74[.]203:80

Cobalt Stike Beacon Detected – 149[.]255[.]132[.]91:443

Malware Analysis – phobos – d5babdaf2abe7ba35c9443f1ca6f8cfa

Malware Analysis – persistence – 8e73c9ecd37de547e94de6a044157bd2

Malware Analysis – persistence – f5aa35a4b633fa7911c31abfcbeecdcf

Malware Analysis – ransomware – cde3f2732fcf5a3b990fd6e33c6757cf

Black Basta Ransomware Victim: Diamond Mowers

Black Basta Ransomware Victim: ALRO

Black Basta Ransomware Victim: EDC3

Black Basta Ransomware Victim: J[.]M[.] Rodgers Co[.]

Black Basta Ransomware Victim: STONE1

Cobalt Stike Beacon Detected – 144[.]126[.]221[.]80:80

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]63:80

Cobalt Stike Beacon Detected – 18[.]184[.]235[.]54:443

Cobalt Stike Beacon Detected – 84[.]32[.]128[.]99:8080

Malware Analysis – evasion – 21f326eef6fda2c5d544c2b5e6d21f34

Malware Analysis – evasion – f05d8588cf2e8be9fa6ccac39a0f7311

Malware Analysis – ransomware – 9d3ca081e7fe27e44707d8634c22fc95

[INCRANSOM] – Ransomware Victim: VZW Avalon

Ai Layoffs To Backfire: Half Quietly Rehired At Lower Pay

[BLACKSHRANTAC] – Ransomware Victim: The Matlusky Firm LLC

[QILIN] – Ransomware Victim: bagnoles[.]nl

[BLACKSHRANTAC] – Ransomware Victim: ApleNet Co[.], Ltd

You may have missed