OSINT

Malware Analysis – djvu – c8e50ba08f558fcf82f7d22d48661fc9

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, evasion, persistence, ransomware, spyware, stealer, themida, trojan, vmprotectMD5:...

Malware Analysis – chaos – f5ad2a45442c0028f4268c72e21e2035

February 18, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, family:quasar, botnet:ransomware, ransomware, spyware, trojanMD5: f5ad2a45442c0028f4268c72e21e2035SHA1: 1edc22b76db0a40f9267a10ab3805bc4955e86b4ANALYSIS DATE: 2023-02-18T16:31:03ZTTPS: T1082, T1053 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – b06df9c80c32bda4a006a3a49c742af2

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b06df9c80c32bda4a006a3a49c742af2SHA1: 323e14b79207907028bd18613648ebeb277b3452ANALYSIS DATE: 2023-02-18T17:14:29ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – 728bfb5c16833dff2ccaf7d5a3585841

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 728bfb5c16833dff2ccaf7d5a3585841SHA1: 3ec0be90afce6e5190166cb5313b7b76ed800746ANALYSIS DATE: 2023-02-18T17:14:40ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – djvu – 0347b3417f6fcf5d58ef9d6c1f9c1404

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 0347b3417f6fcf5d58ef9d6c1f9c1404SHA1: e3ff63b00704de67d0f9f70f24f4566579d80ef2ANALYSIS DATE: 2023-02-18T17:32:03ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – djvu – 7ff5343fece92fb5d5428a984f89e3bc

February 18, 2023

LockBit 3.0 Ransomware Victim: primorossi[.]com[.]br

February 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: diavaz[.]com

February 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: inowai[.]com

February 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: isosteo[.]fr

February 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: aguasdoporto[.]pt

February 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

GoDaddy Discloses Multi-Year Security Breach Causing Malware Installations and Source Code Theft

February 18, 2023

Web hosting services provider GoDaddy on Friday disclosed a multi-year security breach that enabled unknown threat actors to install malware...

6d25b2587b1abe3b99f67e2fbc8769a79970aed4237af3023a79a72066e6bd70

Twitter Limits SMS-Based 2-Factor Authentication to Blue Subscribers Only

February 18, 2023

Twitter has announced that it's limiting the use of SMS-based two-factor authentication (2FA) to its Blue subscribers. "While historically a...

Cobalt Stike Beacon Detected – 147[.]182[.]250[.]103:443

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]91[.]148[.]9:443

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 146[.]190[.]118[.]40:443

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]92[.]158[.]220:8000

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]34[.]36[.]50:3333

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – f16b0526c3c7082918f6abf8fd944664

February 18, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f16b0526c3c7082918f6abf8fd944664SHA1: 8c6df4532d47296d62b5d935120a5d2e788978e8ANALYSIS DATE: 2023-02-18T09:18:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 1ce725c0dc288d7789a0ba52a54726ac

February 18, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 1ce725c0dc288d7789a0ba52a54726acSHA1: 20dcfb326a66350af7aea504277d7cc97caa420cANALYSIS DATE: 2023-02-18T09:22:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 087f75c142ef66212e79e99f26abf68a

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 087f75c142ef66212e79e99f26abf68aSHA1: 44999a5c4ad01c3cc48868a49c81ef79d183d429ANALYSIS DATE: 2023-02-18T09:34:52ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – 036b724993d70eeada2c2607e0d5028e

February 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 036b724993d70eeada2c2607e0d5028eSHA1: 0bafca071bac6f6dff62841419a50ee070d5ba33ANALYSIS DATE: 2023-02-18T09:21:36ZTTPS: T1060, T1112, T1012, T1082,...

Cobalt Stike Beacon Detected – 43[.]143[.]195[.]119:2121

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 180[.]76[.]247[.]230:8082

February 18, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

OSINT

Malware Analysis – djvu – c8e50ba08f558fcf82f7d22d48661fc9

Malware Analysis – chaos – f5ad2a45442c0028f4268c72e21e2035

Malware Analysis – djvu – b06df9c80c32bda4a006a3a49c742af2

Malware Analysis – djvu – 728bfb5c16833dff2ccaf7d5a3585841

Malware Analysis – djvu – 0347b3417f6fcf5d58ef9d6c1f9c1404

Malware Analysis – djvu – 7ff5343fece92fb5d5428a984f89e3bc

LockBit 3.0 Ransomware Victim: primorossi[.]com[.]br

LockBit 3.0 Ransomware Victim: diavaz[.]com

LockBit 3.0 Ransomware Victim: inowai[.]com

LockBit 3.0 Ransomware Victim: isosteo[.]fr

LockBit 3.0 Ransomware Victim: aguasdoporto[.]pt

GoDaddy Discloses Multi-Year Security Breach Causing Malware Installations and Source Code Theft

Twitter Limits SMS-Based 2-Factor Authentication to Blue Subscribers Only

Cobalt Stike Beacon Detected – 147[.]182[.]250[.]103:443

Cobalt Stike Beacon Detected – 119[.]91[.]148[.]9:443

Cobalt Stike Beacon Detected – 146[.]190[.]118[.]40:443

Cobalt Stike Beacon Detected – 45[.]92[.]158[.]220:8000

Cobalt Stike Beacon Detected – 101[.]34[.]36[.]50:3333

Malware Analysis – smokeloader – f16b0526c3c7082918f6abf8fd944664

Malware Analysis – – 1ce725c0dc288d7789a0ba52a54726ac

Malware Analysis – djvu – 087f75c142ef66212e79e99f26abf68a

Malware Analysis – djvu – 036b724993d70eeada2c2607e0d5028e

Cobalt Stike Beacon Detected – 43[.]143[.]195[.]119:2121

Cobalt Stike Beacon Detected – 180[.]76[.]247[.]230:8082

Cobalt Strike Beacon Detected – 185[.]224[.]128[.]52:4443

Cobalt Strike Beacon Detected – 129[.]226[.]212[.]179:11111

Cobalt Strike Beacon Detected – 118[.]31[.]114[.]149:8081

Cobalt Strike Beacon Detected – 171[.]244[.]143[.]184:4443

Cobalt Strike Beacon Detected – 106[.]75[.]215[.]96:8081

You may have missed