OSINT

Malware Analysis – smokeloader – da7ba70077b15294e39bd92ff7989b99

April 17, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: da7ba70077b15294e39bd92ff7989b99SHA1: 66584515852401e7e4b90fb810d2df7a599f7201ANALYSIS DATE: 2023-04-17T15:41:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 9fd40b68825eb9aa79d9f2b106aaf59e

April 17, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9fd40b68825eb9aa79d9f2b106aaf59eSHA1: 9b30c9ed81fea0f414a7cb9f1496616a35339f18ANALYSIS DATE: 2023-04-11T16:19:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – ca6f44d1cc12231f26c34c9dfb262f95

April 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:623db25256a5734d1207787d269d05b2, discovery, persistence, ransomware, spyware, stealerMD5: ca6f44d1cc12231f26c34c9dfb262f95SHA1: d1a250eaf85eb482d0e7ee6a13b7938f0fe234f9ANALYSIS DATE: 2023-04-17T15:53:20ZTTPS: T1060, T1112, T1222, T1012,...

Malware Analysis – djvu – 013e7b9f96797555fa6207a31ea66a60

April 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:623db25256a5734d1207787d269d05b2, discovery, persistence, ransomware, spyware, stealerMD5: 013e7b9f96797555fa6207a31ea66a60SHA1: 3e2a7079228298bd9f2fb945fdfdb05f8b853660ANALYSIS DATE: 2023-04-17T16:17:06ZTTPS: T1082, T1053, T1012, T1060,...

Malware Analysis – smokeloader – cb64985632f35fa9bdd30b7b348b1522

April 17, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: cb64985632f35fa9bdd30b7b348b1522SHA1: b0caef4db6825c18c024fc4b93e0e7b164cb59c5ANALYSIS DATE: 2023-04-17T16:09:19ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 1a3aa753fbc8877bdebc46ee93512cb4

April 17, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1a3aa753fbc8877bdebc46ee93512cb4SHA1: 1cb7f822d252d75cc490cab2a1c4a280675ceb6fANALYSIS DATE: 2023-04-17T16:18:52ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 7928c50cae4ebd08e65423ff46c4e9b0

April 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:623db25256a5734d1207787d269d05b2, discovery, persistence, ransomware, spyware, stealerMD5: 7928c50cae4ebd08e65423ff46c4e9b0SHA1: e8678f10645d7226175c80166a3b76cb9173faffANALYSIS DATE: 2023-04-17T17:01:36ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – persistence – 7f9ac429e16252648618ddcb9b3886a1

April 17, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7f9ac429e16252648618ddcb9b3886a1SHA1: 0f4de1a4b065a5f154a4b843cfc58325bb3b4e0fANALYSIS DATE: 2023-04-17T17:10:56ZTTPS: T1004, T1112, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 671a5553c82fb95a3c5711707d0b7d39

April 17, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 671a5553c82fb95a3c5711707d0b7d39SHA1: d041d72966e651e8ad0674a179371aec2bd62349ANALYSIS DATE: 2023-04-17T17:17:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – a3ef7f3fab1b3bd5fe855c0d1c271fa8

April 17, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a3ef7f3fab1b3bd5fe855c0d1c271fa8SHA1: 30e840f8c5c8518e095b2f14256d6dbe466d5bfaANALYSIS DATE: 2023-04-17T17:10:28ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – dharma – 650ac8296c53afd1f6adec4c34871c02

April 17, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 650ac8296c53afd1f6adec4c34871c02SHA1: 29d81be34df4ecd0cee036d6d71bc1144c477bd5ANALYSIS DATE: 2023-04-17T17:42:34ZTTPS: T1005, T1081, T1082, T1112, T1060, T1107, T1490...

Malware Analysis – evasion – bb703f4d9d67f2f777fee75b4f3b5029

April 17, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: bb703f4d9d67f2f777fee75b4f3b5029SHA1: ec055096e8d8ac62e9d6d5fd419fd4d89a694579ANALYSIS DATE: 2023-04-17T17:57:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – gandcrab – 084b358278f51b1040d20508a323020c

April 17, 2023

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, ransomware, spyware, stealerMD5: 084b358278f51b1040d20508a323020cSHA1: 8766b2475467f8314fe3916b4df540705fbcc8d1ANALYSIS DATE: 2023-04-17T17:57:14ZTTPS: T1012, T1120, T1082, T1005, T1081, T1107, T1490...

Malware Analysis – wannacry – 0a3b63a9039391a6a5ea3918c7e8a837

April 17, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 0a3b63a9039391a6a5ea3918c7e8a837SHA1: 20fd851be1189e6d2e9000bb0a0e4ebf7882310fANALYSIS DATE: 2023-04-17T17:36:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

OSINT

Malware Analysis – smokeloader – da7ba70077b15294e39bd92ff7989b99

Malware Analysis – ransomware – 9fd40b68825eb9aa79d9f2b106aaf59e

Malware Analysis – djvu – ca6f44d1cc12231f26c34c9dfb262f95

Malware Analysis – djvu – 013e7b9f96797555fa6207a31ea66a60

Malware Analysis – smokeloader – cb64985632f35fa9bdd30b7b348b1522

Malware Analysis – ransomware – 1a3aa753fbc8877bdebc46ee93512cb4

Malware Analysis – djvu – 7928c50cae4ebd08e65423ff46c4e9b0

Malware Analysis – persistence – 7f9ac429e16252648618ddcb9b3886a1

Malware Analysis – smokeloader – 671a5553c82fb95a3c5711707d0b7d39

Malware Analysis – persistence – a3ef7f3fab1b3bd5fe855c0d1c271fa8

Malware Analysis – dharma – 650ac8296c53afd1f6adec4c34871c02

Malware Analysis – evasion – bb703f4d9d67f2f777fee75b4f3b5029

Malware Analysis – gandcrab – 084b358278f51b1040d20508a323020c

Malware Analysis – wannacry – 0a3b63a9039391a6a5ea3918c7e8a837

FIN7 and Ex-Conti Cybercrime Gangs Join Forces in Domino Malware Attacks

What’s the Difference Between CSPM & SSPM?

Google Uncovers APT41’s Use of Open Source GC2 Tool to Target Media and Job Sites

Vice Society Ransomware Using Stealthy PowerShell Tool for Data Exfiltration

Tour of the Underground: Master the Art of Dark Web Intelligence Gathering

LockBit 3.0 Ransomware Victim: brl[.]fr

LockBit 3.0 Ransomware Victim: alpine4u[.]com

New Zaraza Bot Credential-Stealer Sold on Telegram Targeting 38 Web Browsers

CISA warns of Android bug exploited by Chinese app to spy on users

LockBit ransomware encryptors found targeting Mac devices

[INCRANSOM] – Ransomware Victim: CF Construction Ltd

[INCRANSOM] – Ransomware Victim: www[.]marvimundo[.]com

CVE Alert: CVE-2025-51657

CVE Alert: CVE-2025-7626

CVE Alert: CVE-2025-7625

You may have missed