OSINT

Malware Analysis – djvu – 6cf045e41470cd3550df9fc6a3d23130

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 6cf045e41470cd3550df9fc6a3d23130SHA1: 652c212e2b4bdfb22b3fbdd3d123a68374724df2ANALYSIS DATE: 2023-03-15T03:25:04ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – smokeloader – 069efa0c9e52f73ff4893fc283d72bb3

March 15, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 069efa0c9e52f73ff4893fc283d72bb3SHA1: 03a5e39bfc863241ef87a806e729e2ed5199f8a1ANALYSIS DATE: 2023-03-15T03:26:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 43a81388da97a601232b351fb4cca79e

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 43a81388da97a601232b351fb4cca79eSHA1: 8d17063e0fd37eefb514e67917c25bfc3066cf78ANALYSIS DATE: 2023-03-15T03:28:03ZTTPS: T1222, T1082, T1130, T1112,...

Malware Analysis – smokeloader – d4d57efdb95f1a0479e5a084a1a306ba

March 15, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d4d57efdb95f1a0479e5a084a1a306baSHA1: 7eae8b9c068c27a1d2d5ff7668b0f4b46198f0f1ANALYSIS DATE: 2023-03-15T03:34:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 0561ceda4fda0f05bd696ada346e5d49

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 0561ceda4fda0f05bd696ada346e5d49SHA1: d44be00c0c324b716e82df52861a7a3fe25c9adaANALYSIS DATE: 2023-03-15T03:29:05ZTTPS: T1005, T1081, T1130, T1112,...

Malware Analysis – djvu – 6d2cb2a0fa078a6473f09589efff93cf

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, stealerMD5: 6d2cb2a0fa078a6473f09589efff93cfSHA1: 93a8342629e733823489c315f3f30f39f735fff0ANALYSIS DATE: 2023-03-15T03:30:07ZTTPS: T1060, T1112, T1222, T1082, T1053,...

Malware Analysis – djvu – 920be486068763e91ed2e5128e0af6d9

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, stealerMD5: 920be486068763e91ed2e5128e0af6d9SHA1: df377dd754ee54e9f947caf336c179b5c94361b9ANALYSIS DATE: 2023-03-15T03:49:04ZTTPS: T1060, T1112, T1222, T1082, T1053,...

Malware Analysis – lockbit – b985ad429f39836ea6b1783c2f14fd1d

March 15, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: b985ad429f39836ea6b1783c2f14fd1dSHA1: 32b177b54d4a47dcb7c2343a5e23f21a433ad3f3ANALYSIS DATE: 2023-03-15T04:07:05ZTTPS: T1490, T1046, T1060, T1112, T1082, T1107 ScoreMeaningExample10Known...

Malware Analysis – chaos – a5b6f4205c64588d3ce31497895d9599

March 15, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: a5b6f4205c64588d3ce31497895d9599SHA1: 94c7af750f5e8c2eb601945aa764f6fbe3be3db6ANALYSIS DATE: 2023-03-15T04:04:04ZTTPS: T1005, T1081, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – chaos – ba7e505385f3729c280dba1b7174f5a6

March 15, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomwareMD5: ba7e505385f3729c280dba1b7174f5a6SHA1: 5d5f3ad4211f14caaa6497cd494eefe34c03469aANALYSIS DATE: 2023-03-15T04:04:04ZTTPS: T1490, T1059, T1107, T1012, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – chaos – baba28ddc7e456cc77377fc427d8a9c0

March 15, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: baba28ddc7e456cc77377fc427d8a9c0SHA1: cbc0a583e7b6a11b76982cf525eb43abf7f35f25ANALYSIS DATE: 2023-03-15T04:04:04ZTTPS: T1490, T1059, T1107, T1082, T1491, T1112,...

Malware Analysis – phobos – cebe17fcdfe9daf1438d2ba986fac811

March 15, 2023

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: cebe17fcdfe9daf1438d2ba986fac811SHA1: d906ad344a57663efbbe291bccd74ba4061f119bANALYSIS DATE: 2023-03-15T04:12:58ZTTPS: T1490, T1059, T1107, T1005, T1081, T1012,...

Malware Analysis – djvu – da9b9e3174536876f9f484cf28f3d354

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: da9b9e3174536876f9f484cf28f3d354SHA1: 84d657de467c0aa6d24f81e272bc6a46eb3f20daANALYSIS DATE: 2023-03-15T04:09:41ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – makop – 7a668b5ec9a34afa512e471a20b8f932

March 15, 2023

Score: 10 MALWARE FAMILY: makopTAGS:family:makop, ransomwareMD5: 7a668b5ec9a34afa512e471a20b8f932SHA1: e53653edc907842c577b3c6dda208a60b409ced8ANALYSIS DATE: 2023-03-15T04:14:03ZTTPS: T1059, T1107, T1490, T1082, T1012 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – f94d991791731fad369fdce4e4d93e5c

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: f94d991791731fad369fdce4e4d93e5cSHA1: c6de1e985b0dbc936ad4a57367405a783671913dANALYSIS DATE: 2023-03-15T04:15:29ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – evasion – b69ce219f7cbe3caf5787ced0f1de7a6

March 15, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, spyware, stealerMD5: b69ce219f7cbe3caf5787ced0f1de7a6SHA1: 71f5e3e4ebba8b0c2a76314aa6822b371dec0a5cANALYSIS DATE: 2023-03-15T04:24:03ZTTPS: T1490, T1059, T1107, T1082, T1005, T1081, T1012 ScoreMeaningExample10Known...

Malware Analysis – lockbit – 6316bb1e8a5c4fadbbce5a0a7e26498a

March 15, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomware, spyware, stealerMD5: 6316bb1e8a5c4fadbbce5a0a7e26498aSHA1: 33794f285ed1e41c8dad4ea3dafeccb0115e4dd9ANALYSIS DATE: 2023-03-15T04:18:02ZTTPS: T1005, T1081, T1491, T1112, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – dharma – 6b86ff8665b1ad95feec45d33fd603cf

March 15, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 6b86ff8665b1ad95feec45d33fd603cfSHA1: 59ca4e72e3103b2c7d0a2eb90c93f72da6cb3b95ANALYSIS DATE: 2023-03-15T04:20:52ZTTPS: T1060, T1112, T1107, T1490, T1005, T1081, T1082...

Malware Analysis – amadey – e4ed5e35900f50a92b2c02a76e398df9

March 15, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:redline, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, infostealer, loader, persistence, ransomware, spyware,...

Malware Analysis – djvu – 5de37d761e18d2226401b394a843b138

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 5de37d761e18d2226401b394a843b138SHA1: 3e385f95db53a011ac2b2587c35d64a8ce0808acANALYSIS DATE: 2023-03-15T05:48:22ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – djvu – ddad9e2374144a91ab7397cf59ef7820

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: ddad9e2374144a91ab7397cf59ef7820SHA1: b745eff98924d9cf8fd226aa0a0e64d0168921faANALYSIS DATE: 2023-03-15T05:44:06ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – persistence – 71852d35ddc0e13d2d830fcf6d185171

March 15, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 71852d35ddc0e13d2d830fcf6d185171SHA1: 1fef641cf4e07924718b9291b80a055016167e9aANALYSIS DATE: 2023-03-15T04:50:37ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – amadey – 0335a8ded38025006fb90549e43348cb

March 15, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, ransomware, trojanMD5: 0335a8ded38025006fb90549e43348cbSHA1: ea861e6dc13aed19f6ffb5a545ec201574c29e1bANALYSIS DATE: 2023-03-15T05:26:27ZTTPS: T1012, T1120, T1082,...

RansomHouse Ransomware Victim: Faraday Technology

March 15, 2023

RansomHouse Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

OSINT

Malware Analysis – djvu – 6cf045e41470cd3550df9fc6a3d23130

Malware Analysis – smokeloader – 069efa0c9e52f73ff4893fc283d72bb3

Malware Analysis – djvu – 43a81388da97a601232b351fb4cca79e

Malware Analysis – smokeloader – d4d57efdb95f1a0479e5a084a1a306ba

Malware Analysis – djvu – 0561ceda4fda0f05bd696ada346e5d49

Malware Analysis – djvu – 6d2cb2a0fa078a6473f09589efff93cf

Malware Analysis – djvu – 920be486068763e91ed2e5128e0af6d9

Malware Analysis – lockbit – b985ad429f39836ea6b1783c2f14fd1d

Malware Analysis – chaos – a5b6f4205c64588d3ce31497895d9599

Malware Analysis – chaos – ba7e505385f3729c280dba1b7174f5a6

Malware Analysis – chaos – baba28ddc7e456cc77377fc427d8a9c0

Malware Analysis – phobos – cebe17fcdfe9daf1438d2ba986fac811

Malware Analysis – djvu – da9b9e3174536876f9f484cf28f3d354

Malware Analysis – makop – 7a668b5ec9a34afa512e471a20b8f932

Malware Analysis – djvu – f94d991791731fad369fdce4e4d93e5c

Malware Analysis – evasion – b69ce219f7cbe3caf5787ced0f1de7a6

Malware Analysis – lockbit – 6316bb1e8a5c4fadbbce5a0a7e26498a

Malware Analysis – dharma – 6b86ff8665b1ad95feec45d33fd603cf

Malware Analysis – amadey – e4ed5e35900f50a92b2c02a76e398df9

Malware Analysis – djvu – 5de37d761e18d2226401b394a843b138

Malware Analysis – djvu – ddad9e2374144a91ab7397cf59ef7820

Malware Analysis – persistence – 71852d35ddc0e13d2d830fcf6d185171

Malware Analysis – amadey – 0335a8ded38025006fb90549e43348cb

RansomHouse Ransomware Victim: Faraday Technology

Cobalt Strike Beacon Detected – 49[.]233[.]32[.]31:9443

Cobalt Strike Beacon Detected – 103[.]171[.]35[.]26:9443

Cobalt Strike Beacon Detected – 45[.]141[.]233[.]66:8080

Cobalt Strike Beacon Detected – 8[.]216[.]80[.]229:9443

Cobalt Strike Beacon Detected – 193[.]112[.]83[.]36:8080

You may have missed