SmokeBot og Bazar: På sporet af den malware, der fører til ransomware-angreb

I januar 2021 beskrev Center for Cybersikkerhed, hvordan tilstedeværelsen af bestemte typer malware i en organisations it-systemer kan være et tegn på, at et ransomware-angreb er under opsejling. I forlængelse heraf udgiver CFCS nu lister over såkaldte Indicators of Compromise (IoC) for malwaren SmokeBot/SmokeLoader og malwaren Bazar.

Målrettede ransomware-angreb sker ofte efter en indledende kompromittering med en anden malware end selve ransomwaren. Hackerne forsøger at ramme offeret med en type malware, der giver mulighed for at få adgang til organisationens it-netværk. Når hackerne har adgang til netværket, kan malwaren bruges til at installere ransomware.

CFCS udgav i januar en liste med information til it-sikkerhedsansvarlige om ti malware-typer og værktøjer, der typisk bliver brugt i infektionskæden i målrettede ransomware-angreb (link). CFCS udgav i den forbindelse også en række IoC'er for malware-familien Gozi.

Indicators of Compromise tilhørende SmokeBot/SmokeLoader og Bazar

Nedenfor har CFCS samlet en liste over såkaldte IoC’er for malware-familierne SmokeBot/SmokeLoader og Bazar fra fundne eksemplarer (samples) af nyere dato.

SmokeBot/SmokeLoader kan blandt andet føre til ransomware-angreb med REvil, mens Bazar kan føre til ransomware-angreb med blandt andet Ryuk eller Conti.

Listen er ikke udtømmende, men IoC’erne kan hjælpe myndigheder og virksomheder med at opdage visse typer af SmokeBot/SmokeLoader og Bazar-infektioner i deres it-systemer.

Hvis organisationen konstaterer, at nogle af de nævnte malware eller værktøjer findes på it-systemerne, anbefaler CFCS, at virksomheden tager kontakt til et professionelt it-sikkerhedsfirma. Et sikkerhedsfirma kan bistå med udrensning af netværk og efterfølgende sikre en styrket beskyttelse mod ransomware-angreb.

IoC'erne består af domæner, IP-adresser og hashværdier (SHA-256).

Bemærk, at de nævnte domæner er brugt af cyberkriminelle, og CFCS anbefaler derfor, at man ikke besøger disse uden tilstrækkelige it-sikkerhedsforanstaltninger.

Indicators of Compromise tilhørende SmokeBot/SmokeLoader

Domæner

http://0011bytes[.]best/upload/
http://1sd1[.]ru/2/
http://32ggswww2[.]info/upload/
http://5spds4o9l[.]top/
http://748yesx9u[.]top/
http://74r7xkjuf[.]top/
http://afopsn[.]bit/arm/api[.]php
http://alltest-service01[.]ru/
http://anotherblock[.]bit/
http://aviatorssm[.]bit/
http://bankshopstars[.]xyz/
http://bankshopstars34321[.]com/
http://bankshopstars34321[.]net/
http://besttest-service01[.]ru/
http://bibs[.]bit/2/
http://biotest-service01[.]ru/
http://bubs3[.]ru/forum/
http://cleancleankkl[.]net/
http://clo-api[.]info/arm/api[.]php
http://clubtest-service01[.]ru/
http://cnock[.]info/2/
http://cnock[.]net/2/
http://cnock[.]xyz/2/
http://cnocks[.]net/2/
http://ct-fr[.]icu/forum/
http://domtest-service01[.]ru/
http://dunujilis11r[.]net/
http://eseruuynli2[.]net/
http://etasuklavish[.]today/
http://ghjk78kjhb[.]net/
http://grammmdinss[.]today/
http://gtres[.]icu/forum/
http://gvs1[.]in/2/
http://hex001[.]info/upload/
http://infotest-service01[.]ru/
http://is8r74eur[.]top/
http://jssbwtgssq[.]com/upload/
http://kimchinikuzims[.]today/
http://kinolive[.]best/upload/
http://kupitest-service01[.]ru/
http://lavanda[.]best/upload/
http://lupadypa[.]dagestan[.]su/
http://m21ch[.]com/2/
http://megatest-service01[.]ru/
http://micr-av[.]ru/forum/
http://mirtest-service01[.]ru/
http://mostest-service01[.]ru/
http://mragyzmachnobesdi[.]today/
http://musaroprovadnikov[.]live/
http://mytest-service01[.]ru/
http://mytest-service0124[.]ru/
http://naritouzina[.]net/
http://natuturalistic[.]net/
http://nd-ov[.]ru/forum/
http://newtest-service01[.]ru/
http://newvawe[.]xyz/
http://notfortuaj[.]net/
http://ntrcopz[.]com/upload/
http://nukaraguasleep[.]net/
http://nulikuliey[.]net/
http://o4s98myt4[.]top/
http://odcq2[.]ru/forum/
http://offce221[.]com/upload/
http://oohdojssks9uf[.]net/
http://polivar[.]club/arm/api[.]php
http://proftest-service01[.]ru/
http://protest-0124[.]tk/
http://protest-0125[.]ml/
http://protest-0126[.]ga/
http://protest-0127[.]cf/
http://protest-0128[.]gq/
http://protest-0129[.]com/
http://protest-0130[.]net/
http://protest-0131[.]org/
http://protest-0132[.]biz/
http://protest-0133[.]info/
http://protest-0134[.]eu/
http://protest-0135[.]nl/
http://protest-0136[.]mobi/
http://protest-0137[.]name/
http://protest-0138[.]me/
http://protest-0139[.]garden/
http://protest-0140[.]art/
http://protest-0141[.]band/
http://protest-0142[.]bargains/
http://protest-0143[.]bet/
http://protest-0144[.]blue/
http://protest-0145[.]business/
http://protest-0146[.]casa/
http://protest-0147[.]city/
http://protest-0148[.]click/
http://protest-0149[.]company/
http://protest-0150[.]futbol/
http://protest-0151[.]gallery/
http://protest-0152[.]game/
http://protest-0153[.]games/
http://protest-0154[.]graphics/
http://protest-0155[.]group/
http://protest-0225[.]ml/
http://protest-0226[.]ga/
http://protest-0227[.]cf/
http://protest-0228[.]gq/
http://protest-0325[.]ml/
http://protest-0326[.]ga/
http://protest-0327[.]cf/
http://protest-0328[.]gq/
http://protest-0524[.]tk/
http://protest-0624[.]tk/
http://protest-service01[.]ru/
http://protest-service0124[.]ru/
http://resrvid[.]xyz/
http://roompampamgandish[.]wtf/
http://rustest-service01[.]ru/
http://rutest-service01[.]ru/
http://rutest-service0124[.]ru/
http://rwsb3tsgw[.]xyz/upload/
http://s04cldrjf[.]com/
http://s47yriuds[.]ml/
http://s4r95xmri[.]top/
http://sd12[.]bit/2/
http://seir49olm[.]com/
http://sfdso948k[.]ml/
http://sgvsgs1[.]ru/2/
http://shoptest-service01[.]ru/
http://skdh9ksdh[.]com/
http://slacvostinrius[.]today/
http://sleiueurf[.]ml/
http://spx459mou[.]com/
http://ssde94d8k[.]top/
http://statsseotraff[.]xyz/web/
http://stoknolimchin[.]exnet[.]su/
http://straponuliusyn[.]today/
http://sulionuili1[.]in/
http://supertest-service01[.]ru/
http://test-service01[.]com/
http://test-service01[.]eu/
http://test-service01[.]fun/
http://test-service01[.]host/
http://test-service01[.]info/
http://test-service01[.]net[.]ru/
http://test-service01[.]net/
http://test-service01[.]online/
http://test-service01[.]org[.]ru/
http://test-service01[.]pp[.]ru/
http://test-service01[.]press/
http://test-service01[.]pro/
http://test-service01[.]pw/
http://test-service01[.]ru[.]com/
http://test-service01[.]site/
http://test-service01[.]space/
http://test-service01[.]store/
http://test-service01[.]su/
http://test-service01[.]tech/
http://test-service01[.]website/
http://test-service01[.]xyz/
http://test-service0124[.]ru/
http://test-service01blog[.]ru/
http://test-service01club[.]ru/
http://test-service01dom[.]ru/
http://test-service01forum[.]ru/
http://test-service01info[.]ru/
http://test-service01land[.]ru/
http://test-service01life[.]ru/
http://test-service01plus[.]ru/
http://test-service01pro[.]ru/
http://test-service01rus[.]ru/
http://test-service01shop[.]ru/
http://test-service01stroy[.]ru/
http://test-service01torg[.]ru/
http://toptest-service01[.]ru/
http://vot552[.]com/upload/
http://vsetest-service01[.]ru/
http://vyefb543[.]ru/upload/
http://xfgvsx94c[.]top/
http://xpom[.]icu/forum/
http://zaniolofusa[.]net/
http://zfront[.]top/
http://zs94eoy8u[.]com/

Hashes (SHA-256)
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Indicators of compromise tilhørende Bazar

Bazar/BazarLoader er en bagdør som ofte sættes i forbindelse med TrickBot og efterfølgende leverer ransomware. Bazar malwaren kommunikerer i øjeblikket med bestemte IP-adresser samt domæner med endelsen “.bazar”. Bazar malwaren indeholder desuden en deterministisk men tidsafhængig algoritme til at beregne sekundære domænenavne såfremt de primære ikke er tilgængelige.

IP-adresser:

3.129.16[.]221
3.140.184[.]59
3.16.186[.]215
3.17.188[.]52
18.237.105[.]107
34.210.71[.]206
34.213.138[.]61
34.220.167[.]220
52.37.89[.]225
54.190.50[.]234
54.191.154[.]42
54.200.17[.]181
54.201.252[.]206
54.244.106[.]110

Domæner:

coldmountainsanimals[.]bazar
rareanimalsofcanada[.]bazar
wildwinternature[.]bazar

acegilalggio[.]bazar
acegimalggip[.]bazar
aceiikbdgiin[.]bazar
acfgikbdhgin[.]bazar
acghilbdihio[.]bazar
achiikbdjiin[.]bazar
aeghkkbeihkn[.]bazar
bcfijmcchijp[.]bazar
begiklceiiko[.]bazar
cefgjmcnhgjp[.]bazar
cfhgjldfjgjo[.]bazar
deehimeeghip[.]bazar
dfegjlefggjo[.]bazar
efehilffghio[.]bazar

forgame[.]bazar
bestgame[.]bazar
alztwfdicu[.]bazar
ocgjqlaspr[.]bazar
cdghilckihin[.]bazar
cefgilclhgin[.]bazar
defikldjhikn[.]bazar
aeehjkajghjm[.]bazar
cdfhimcihhio[.]bazar

SHA256 hashes:
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