New Malware IOC's Updated

Wednesday, March 30th, 2022

Quakbot IOC’s have been updated

ExecuteMalware @executemalware

I also saw about 35 #qakbot #qbot emails today (obama171). Here are the IOCs:

github.comMalware-IOCs/2022-03-29 Qakbot (obama171) IOCs at main · executemalware/Malware-IOCsContribute to executemalware/Malware-IOCs development by creating an account on GitHub.

Emotet IOC’s have been updated

ExecuteMalware @executemalware

I received about a dozen #emotet (E4) emails today. Here are the IOCs:

github.comMalware-IOCs/2022-03-29 Emotet (E4) IOCs at main · executemalware/Malware-IOCsContribute to executemalware/Malware-IOCs development by creating an account on GitHub.

Venus IOC’s have been updated

Amigo-A @Amigo_A_

A new #Venus #Ransomware variant id-ransomware.blogspot.com/2021/05/venus-… Some files are erased to zero. MD5: 207e6f51489a897991888a38efa3acd6

HermeticWipe IOC’s have been updated

Arkbird @Arkbird_SOLG

Yep, that #HermeticWipe, not much change in its structure, nice find 👏

Honey @0xthreatintel

Update: In the recent payload of #FoxBlade ( #Hermetic) #Wiper , only WindowsAPIs are being renamed as different then usual, other than that there is no such change in the payload. [ in black ]👇 Hash: ffea1266b09abbf0ceb59119746d8630 #threatintel #FoxBlade #Wiper #MBR . https://t.co/6CwKnjsHcg https://t.co/FwM9vmT8Xp